many changes

hosts/fw.cloonar.com/modules/gitea.nix

@@ -35,9 +35,12 @@ in
         isReadOnly = false;
       };
       "/var/lib/acme/gitea/" = {
-        hostPath = "${config.security.acme.certs.${domain}.directory}";
+        hostPath = config.security.acme.certs.${domain}.directory;
         isReadOnly = true;
       };
+      "/run/secrets/gitea-mailer-password" = {
+        hostPath = config.sops.secrets.gitea-mailer-password.path;
+      };
     };
     config = { lib, config, pkgs, ... }: {
       imports = [
@@ -73,6 +76,7 @@ in
       services.gitea = {
         enable = true;
         appName = "Cloonar Gitea server"; # Give the site a name
+        mailerPasswordFile = "/run/secrets/gitea-mailer-password";
         settings = {
           server = {
             ROOT_URL = "https://${domain}/";
@@ -89,6 +93,14 @@ in
             ALLOW_ONLY_EXTERNAL_REGISTRATION              = true;
             SHOW_REGISTRATION_BUTTON                      = false;
           };
+          mailer = {
+            ENABLED        = true;
+            FROM           = "Gitea Cloonar <gitea@cloonar.com>";
+            PROTOCOL       = "smtp+starttls";
+            SMTP_ADDR      = "mail.cloonar.com";
+            SMTP_PORT      = 587;
+            USER           = "gitea@cloonar.com";
+          };
           actions.ENABLED=true;
         };
       };
@@ -107,4 +119,8 @@ in
   };
 
   sops.secrets.gitea-runner = {};
+  sops.secrets.gitea-mailer-password = {
+    owner = "gitea";
+    restartUnits = [ "container@git.service" ];
+  };
 }