flake lock

modules/home/programs/aerc/default.nix

@@ -1,6 +1,7 @@
 {
   pkgs,
   config,
+  osConfig,
   lib,
   ...
 }: let
@@ -183,11 +184,17 @@ in {
     accounts.email = {
       maildirBasePath = ".mail";
       accounts.protonmail = {
-        realName = "notmuch";
-        address = "notmuch@localhost";
+        primary = true;
+        realName = "adde";
+        address = "adam@cnst.dev";
         aerc = {
           enable = true;
-          extraAccounts.source = "notmuch://~/.mail";
+          extraAccounts = {
+            source = "imap://adam%40cnst.dev@127.0.0.1:1143";
+            source-cred-cmd = "cat ${osConfig.age.secrets.mailpwd.path}";
+            outgoing = "smtp://adam%40cnst.dev@127.0.0.1:1025";
+            outgoing-cred-cmd = "cat ${osConfig.age.secrets.mailpwd.path}";
+          };
           extraBinds.messages."r" = '':reply -aqA {{index (.Filename | split ("/")) 4}}<Enter>'';
           extraBinds.view."r" = '':reply -aqA {{index (.Filename | split ("/")) 4}}<Enter>'';
         };

modules/nixos/programs/pkgs/default.nix

@@ -45,6 +45,7 @@ in {
           wf-recorder
           inotify-tools
           git-crypt
+          protonmail-bridge-gui
         ]
 
         (mkIf cfg.desktop.enable [

modules/nixos/services/agenix/default.nix

@@ -36,6 +36,9 @@ in {
         secrets = {
           cnstssh.file = "${self}/secrets/cnstssh.age";
           cnixssh.file = "${self}/secrets/cnixssh.age";
+          certpem.file = "${self}/secrets/certpem.age";
+          keypem.file = "${self}/secrets/keypem.age";
+          mailpwd.file = "${self}/secrets/mailpwd.age";
         };
       })
       (mkIf cfg.toothpc.enable {