From 785cf77e891e0c4d6dd181c025f1ffb888d610e9 Mon Sep 17 00:00:00 2001
From: Michael Thomas <michaelhthomas@outlook.com>
Date: Wed, 19 Jun 2024 10:10:12 -0400
Subject: [PATCH] feat(services/forgejo): configure mailer with sendgrid

---
 modules/services/forgejo/default.nix |  14 ++++++++++++++
 secrets/secrets.nix                  |   1 +
 secrets/sendgrid-key.age             | Bin 0 -> 282 bytes
 3 files changed, 15 insertions(+)
 create mode 100644 secrets/sendgrid-key.age

diff --git a/modules/services/forgejo/default.nix b/modules/services/forgejo/default.nix
index ea5f988..b9527af 100644
--- a/modules/services/forgejo/default.nix
+++ b/modules/services/forgejo/default.nix
@@ -61,6 +61,11 @@ in {
 
   config = mkMerge [
     (mkIf cfg.enable {
+      age.secrets.forgejoSendgridKey = {
+        file = ../../../secrets/sendgrid-key.age;
+        owner = "forgejo";
+        group = "forgejo";
+      };
       services.forgejo = {
         enable = true;
         package = pkgs.unstable.forgejo;
@@ -83,6 +88,15 @@ in {
         settings.oauth2_client = {
           ENABLE_AUTO_REGISTRATION = true;
         };
+        settings.mailer = {
+          ENABLED = true;
+          FROM = "forgejo@michaelt.xyz";
+          PROTOCOL = "starttls";
+          SMTP_ADDR = "smtp.sendgrid.net";
+          SMTP_PORT = 587;
+          USER = "apikey";
+        };
+        mailerPasswordFile = config.age.secrets.forgejoSendgridKey.path;
       };
 
       networking.firewall.interfaces."${firewallInterface}".allowedTCPPorts = [cfg.port];
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 2f1fe02..b441023 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -7,6 +7,7 @@ in {
   "wireguard-thinkcentre.age".publicKeys = [venus];
   "keycloak-db.age".publicKeys = [venus];
   "forgejo-actions.age".publicKeys = [venus];
+  "sendgrid-key.age".publicKeys = [venus];
 
   # Oracle
   "wireguard-oracle.age".publicKeys = [oracle];
diff --git a/secrets/sendgrid-key.age b/secrets/sendgrid-key.age
new file mode 100644
index 0000000000000000000000000000000000000000..a9660a1878f61339d8f169603bede86763c648af
GIT binary patch
literal 282
zcmV+#0p<Q-XJsvAZewzJaCB*JZZ2<fXD@a!3N1b$b8~1dWn?lnH8D9LYC>*VaZw;;
zWot%PN<&yRL2-9eNKjHaWNcP*NoY$pW^p)HMNxP`Y-w~hZcH<Ccy9_tN@jLPH&Qid
zLP&H?M@TnPPC`(1Lt{&CXi8Z`T4H5zPfjyKZD@K~H%SUDEiE8xH8^NkOiy@oI7v8i
zYkEamLw7?+Ojk%@M|NysNpfc|FKlFGVR<oFFhvSbfWp=~-N5`5*bEFvlT<IbDtneZ
zP$x+IKb_||crz3ErP)9$0ME)zwXo3{JsB=Evyw^r)>%zwLFqP6Ey-CuhT!cG#<I1c
gHi0uavPKr<f@lJ;=C|2(L$QK|VvOSQ-v1%+de|;)0ssI2

literal 0
HcmV?d00001