aerc: add new email account

configs/aerc.nix

@@ -8,6 +8,12 @@
   inherit (import ../lib/email.nix) defaults thunderbirdProfile;
 in {
   age.secrets = {
+    email-password-ical-ephemeris = {
+      file = ../secrets/email-password-ical-ephemeris.age;
+      owner = config.users.users.me.name;
+      group = config.users.users.me.group;
+      mode = "400";
+    };
     email-password-cock = {
       file = ../secrets/email-password-cock.age;
       owner = config.users.users.me.name;
@@ -92,6 +98,19 @@ in {
           smtp.port = 25;
           smtp.tls.useStartTls = true;
         };
+      ical-ephemeris =
+        lib.recursiveUpdate defaults
+        rec {
+          userName = "ical.ephemeris@web.de";
+          realName = "Kieran from iCal Ephemeris";
+          address = userName;
+          passwordCommand = "${pkgs.coreutils}/bin/cat ${config.age.secrets.email-password-ical-ephemeris.path}";
+          imap.host = "imap.web.de";
+          imap.port = 993;
+          smtp.host = "smtp.web.de";
+          smtp.port = 587;
+          smtp.tls.useStartTls = true;
+        };
       letos =
         lib.recursiveUpdate defaults
         {

secrets.txt

@@ -3,6 +3,7 @@ secrets/cifs-credentials-zodiac.age
 secrets/di-fm-key.age
 secrets/email-password-cock.age
 secrets/email-password-fysi.age
+secrets/email-password-ical-ephemeris.age
 secrets/email-password-letos.age
 secrets/email-password-meinhak99.age
 secrets/email-password-posteo.age
@@ -76,6 +77,7 @@ secrets/telegram-token-proverb.age
 secrets/telegram-token-reverse.age
 secrets/telegram-token-streaming-link.age
 secrets/weechat-sec.conf.age
+secrets/wifi.age
 secrets/zaatar-moodle-dl-basicAuth.age
 secrets/zaatar-moodle-dl-tokens.json.age
 secrets/zaatar-retiolum-privateKey-ed25519.age

systems/ful/configuration.nix

@@ -71,6 +71,13 @@ in {
     ];
   };
 
+  services.nginx.virtualHosts."ical-ephemeris.kmein.de" = {
+    addSSL = true;
+    enableACME = true;
+    locations."/" = {
+      root = "/var/www/ical-ephemeris";
+    };
+  };
 
   users.users.servant = {
     isSystemUser = true;