feat(alcyone/firefly): add mailing setup

Author: Misterio77

hosts/alcyone/secrets.yaml

@@ -4,6 +4,8 @@ grafana-mail-password: ENC[AES256_GCM,data:zymg7cyZkdoTZoNV0sy7/YiEoPA5S+tyOhCs8
 grafana-mail-password-hashed: ENC[AES256_GCM,data:sGGzxKHiZqF3WUdCZP4WYvH9U2l4GOmwQ7EyhMM65RdaDEzyNmpuuYPxQzQU4ozZ1wvgaL41BgMvXfFn,iv:eGnd+B6p/XL9f/lskYYw0oD6unHKL38rN3wDOPliE18=,tag:Bpj4Fkw96cDP4fr012W7JA==,type:str]
 media-mail-password: ENC[AES256_GCM,data:9Fd1juXrB3K9yZAkiXWs6oxY4aKl346vB4hzFi3K,iv:V34KTDDDMOpgMlTJJOwsgzuQ+QbPSijlNa6rRUOcHp4=,tag:V5cxYPujpazLHs7fTLt0uQ==,type:str]
 media-mail-password-hashed: ENC[AES256_GCM,data:/8a6XKkLRC8Pp2T/2e0HD4R8nOlbPOSxEDGXiQLk3934MrNbYC1Lu0MWL7olz/XjqkP7DdKVDfd5q7XM,iv:OS2UJxOK+5THx0pLNnda/NPrqFQr0hgt5J74/VZl96s=,tag:FSTXAGrJCGcgurB4CX/OhQ==,type:str]
+firefly-mail-password: ENC[AES256_GCM,data:j6bJoGj9uQejjeLAbYU2DnbDJ3FsapFYEgVTKYL0,iv:xJZio1AlYMeQOcWPuIHAQy48o1H5z+WlEXNWwuBJI0U=,tag:fyei/obrmPGhDbPzFuI0yQ==,type:str]
+firefly-mail-password-hashed: ENC[AES256_GCM,data:2W8eTw9cFTvkQ2YpHWyHa/hQX7zQd2BRp25PKJHmuWleYlLvMYo0dCKglmXA9UjVpk3wZ/iu50i1GtRu,iv:XhlvOXp1r0nog9/TVsPOOT0P4waSyKpsIAgxrtk22Es=,tag:etUkJCybY92WqIa/EiVQkg==,type:str]
 grafana-gabriel-password: ENC[AES256_GCM,data:yWG0nNFWT0Of,iv:bd8bc0H4GiSfYctZHBxrlxoys1XE6AlrmbohhDCglyM=,tag:+t2j24cf+cxiTLDzGi5LIw==,type:str]
 firefly-key: ENC[AES256_GCM,data:9OHBwJp1Ekrv43aaP5p4GWoHlx90DolEpJofbq60Rwk=,iv:rvw0eyN2o+q3Hm/6nsNqWomJkqwB9TBcozymH0crKGU=,tag:5ohSol3iUIe5YOIhJXkRRA==,type:str]
 sops:
@@ -17,8 +19,8 @@ sops:
             cjJrZWhKOFpMRytWcFg2Y0xscGtyZzgKC9oZ5kQs78AMAOCUVu8W1gD6bSum91DF
             kTr57muioVJPcP5ccxgZZgd9jmUxErw5zS1Ex/rtXwa/27nrxFNKeg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-12-08T22:56:59Z"
-    mac: ENC[AES256_GCM,data:XqyQodswrAkfQ0M85HwJSl4wUMgG5B+1K4pqA01xkeJM5MNaNvbpPBgk3kaYzhq7I6ZutsQfYmzzOFHA9bz8uENBELALZtU4KdUQZcIj700/3x5TQTP5+VXhPp3rw+wxuyVuTR6YMf03IeGtVSwDDOTXBp3561LU/mua8X27CUw=,iv:WtiLrxG5ffed0rrmelTlY4uO/zssLiWgnTo1zN2554s=,tag:EQ7CwsPa/l1ucahXWalXMA==,type:str]
+    lastmodified: "2026-02-06T00:50:22Z"
+    mac: ENC[AES256_GCM,data:1TQdAcX55XS4j/ZAIfrAmXqYFKwm9/wCl/4oMsrlrCRZDZoKSsoPLhdeEzdhDa/2SpLRClQlJkG2HXQgawW0S5xjHArguLIb39tPP7GghMaYhEF4tWGcOdnndsbikaut+iVkVcPA4VPPDsIUi0gdqwy073cQYl3yYg2FDOHoBTY=,iv:WQYKdDKVrXdLOT+Uusc4gAvFfiyDdw/MvwGQ0H2eaBs=,tag:Hv+p54636hGk0BELIvoefg==,type:str]
     pgp:
         - created_at: "2023-02-06T01:46:44Z"
           enc: |-

hosts/alcyone/services/firefly.nix

@@ -5,6 +5,14 @@
       APP_KEY_FILE = config.sops.secrets.firefly-key.path;
       ENABLE_EXCHANGE_RATES = "true";
       ENABLE_EXTERNAL_RATES = "true";
+      SITE_OWNER = "hi@m7.rs";
+      MAIL_MAILER = "smtp";
+      MAIL_FROM = "firefly@m7.rs";
+      MAIL_HOST = "mail.m7.rs";
+      MAIL_PORT = 465;
+      MAIL_ENCRYPTION = "tls";
+      MAIL_USERNAME = "firefly@m7.rs";
+      MAIL_PASSWORD = config.sops.secrets.firefly-mail-password.path;
     };
     enableNginx = true;
     virtualHost = "firefly.m7.rs";
@@ -15,10 +23,17 @@
     enableACME = true;
   };
 
-  sops.secrets.firefly-key = {
-    owner = "firefly-iii";
-    group = "nginx";
-    sopsFile = ../secrets.yaml;
+  sops.secrets = {
+    firefly-key = {
+      owner = "firefly-iii";
+      group = "nginx";
+      sopsFile = ../secrets.yaml;
+    };
+    firefly-mail-password = {
+      owner = "firefly-iii";
+      group = "nginx";
+      sopsFile = ../secrets.yaml;
+    };
   };
 
   environment.persistence = {

hosts/alcyone/services/mail.nix

@@ -37,6 +37,10 @@
         sendOnly = true;
         hashedPasswordFile = config.sops.secrets.media-mail-password-hashed.path;
       };
+      "firefly@m7.rs" = {
+        sendOnly = true;
+        hashedPasswordFile = config.sops.secrets.firefly-mail-password-hashed.path;
+      };
     };
     mailboxes = {
       Archive = {
@@ -76,6 +80,7 @@
     gabriel-mail-password.sopsFile = ../secrets.yaml;
     grafana-mail-password-hashed.sopsFile = ../secrets.yaml;
     media-mail-password-hashed.sopsFile = ../secrets.yaml;
+    firefly-mail-password-hashed.sopsFile = ../secrets.yaml;
   };
 
   # Webmail