From f664c6142bd205eee01398dcb18128da22138f90 Mon Sep 17 00:00:00 2001
From: Nick <nickjhiebert@proton.me>
Date: Mon, 9 Jun 2025 03:04:37 -0500
Subject: [PATCH] feat: nextcloud test

---
 modules/nixos/services/nextcloud/default.nix | 18 +++++++++++++++---
 secrets/secrets.yaml                         |  6 +++---
 2 files changed, 18 insertions(+), 6 deletions(-)

diff --git a/modules/nixos/services/nextcloud/default.nix b/modules/nixos/services/nextcloud/default.nix
index 4fecb65..afecf88 100755
--- a/modules/nixos/services/nextcloud/default.nix
+++ b/modules/nixos/services/nextcloud/default.nix
@@ -8,7 +8,12 @@ let
   inherit (flake.config.people) user0;
   inherit (flake.config.people.users.${user0}) name;
   inherit (flake.config.machines.devices) ceres;
-  inherit (flake.config.services.instances) nextcloud nginx web;
+  inherit (flake.config.services.instances)
+    nextcloud
+    nginx
+    smtp
+    web
+    ;
   service = nextcloud;
   localhost = web.localhost.address0;
   host = "${service.subdomain}.${web.domains.url0}";
@@ -43,8 +48,14 @@ in
       settings = {
         default_phone_region = "CA";
         log_type = "file";
-        mail_sendmailmode = "pipe";
-        mail_smtpmode = "sendmail";
+        mail_sendmailmode = "smtp";
+        mail_smtpmode = "smtp";
+        mail_smtphost = service.email.address0;
+        mail_smtpport = smtp.ports.port0;
+        mail_smtpsecure = "ssl";
+        mail_smtpauth = true;
+        mail_smtpname = smtp.hostname;
+        mail_smtppassword = config.sops.secrets."${service.name}-smtp".path;
         maintenance_window_start = 4;
         overwriteprotocol = "https";
         trusted_proxies = [
@@ -93,6 +104,7 @@ in
           })
           [
             "pass"
+            "smtp"
           ]
       );
     };
diff --git a/secrets/secrets.yaml b/secrets/secrets.yaml
index ea48b5b..68942a8 100755
--- a/secrets/secrets.yaml
+++ b/secrets/secrets.yaml
@@ -35,7 +35,7 @@ wireguard-CA220: ENC[AES256_GCM,data:rNy/IMKqAOsgMUu5r8BZsjTCu0L5fDDDV3/g+pkhW1y
 wireguard-CA358: ENC[AES256_GCM,data:/VewmiNfRc9/wSE7TT+z1F9LLIvr/5wPsQZ/zBwAh3dEi9yswOGyde2b/XQ=,iv:7U5dmqFiwhCoL1moGSfHprv85o5TdMr6T2sNk5gH82I=,tag:T1hqh8CiO2iBa+ksaiKCtA==,type:str]
 wireguard-CA627: ENC[AES256_GCM,data:chmDsH2nE0nagjFRZWuxX08/Ykt+rIgCHYkMHd+7nIqihK5SebF7MJlrp84=,iv:NVOlGE7W70nQ0UM/i5WixJvDULO3Y4cLf8h+OAGHhQQ=,tag:L123ShCnr9+kIg1itIoqBA==,type:str]
 glance-jellyfin: ENC[AES256_GCM,data:ozdDKgAWkA88J2j8RtiOP/aQPAt/neUOSlAZF20g510=,iv:x+VhYlnA9F/VPrzVcma4/oPelCc8kjWoTZvOs4L9Uqo=,tag:crdSDjr8Y5GH/JAF6t8Yeg==,type:str]
-kanboard-smtp: ENC[AES256_GCM,data:FmmLEGr5Q8RHtie11Y88XQ==,iv:KtY/Bl2vpkXim7KrkK7cc5n0M0RDlxerbXu9jczj/hI=,tag:ZlbV6d1wH6KmbvHJR3Fq/w==,type:str]
+nextcloud-smtp: ENC[AES256_GCM,data:XMNPN6qLGw4WEl5C+u+sDg==,iv:LOhQ5yscdwCYGj3U3RoUy8SdpElZKEr3xSJfE+rDVYc=,tag:+kr4gjrCfqwrXsT4T4CBYQ==,type:str]
 sops:
     age:
         - recipient: age19dpncsdphdt2tmknjs99eghk527pvdrw0m29qjn2z2gg3et5tdtqycqhl0
@@ -47,7 +47,7 @@ sops:
             bXBOa1VSakoyaWxpODJEOU11QUZCaUEK8Ch9Ten3DdrPHF1DTH2qei85AlHUOaLD
             aNfzakake7ej+MxJYdKEU0bcWofNMKzIlZa2uM10KZSENDP8d8qlig==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-09T00:32:17Z"
-    mac: ENC[AES256_GCM,data:b4WMUmVOzgcz/ajxPl0OfQUGarUtnFIFS3DA9CjogPz6aVNDGWrVged5FB6UOotoqQ5RcgThewSu2HztEfCbhM0ZwZ0ak87XS8QHb++s97HhYeeh5mqgVnpsvF4Coa9aRpc2H4etuUNYFxoDojT/hTUKzg3a3QNSWzB06aKTd1A=,iv:YEJN5sakhN1rFytIDMIHpHAVYxvbt9iI2eXL2YBUYnY=,tag:SNBQWZIrXw4ptMLEqkR/xA==,type:str]
+    lastmodified: "2025-06-09T08:04:25Z"
+    mac: ENC[AES256_GCM,data:K7bTarl/RZ3tZ01dG9ZQBpfGzP9Zcx9mnce5HuMUOevkQ+fnBFuFq2QUdV4FDQ+XgUXL7/sIR/epEaOIUxWvaM+CY8Ni6+oI1zIRTJobuUULjz1gKapMaGmTLS0/3JbLgfyYRkY46iV30bn5sSD6yDXZJW4P2pE6Qui3nbBNccE=,iv:ndrrc34ETY+FRGpgmKnJ6X8++f//93HvrzHxyow3b6Y=,tag:Nhz17+DIfRKW9/hcD5JG+A==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.10.2