From e401d1040f311d5521d57094d75b67e93e7b2393 Mon Sep 17 00:00:00 2001
From: Yisroel Baum <yisroel.d.baum@gmail.com>
Date: Wed, 3 Jun 2026 11:24:43 +0300
Subject: [PATCH] add mail settings for discourse

---
 discourse.nix                 | 24 +++++++++++++++++++++---
 secrets/discourseMailKey.yaml | 16 ++++++++++++++++
 2 files changed, 37 insertions(+), 3 deletions(-)
 create mode 100644 secrets/discourseMailKey.yaml

diff --git a/discourse.nix b/discourse.nix
index 28557cf..f919b2e 100644
--- a/discourse.nix
+++ b/discourse.nix
@@ -10,13 +10,24 @@
     admin = {
       email = "yisroel.d.baum@gmail.com";
       fullName = "Yisroel Baum";
-      passwordFile = "/run/secrets/discourse-admin-password";
+      passwordFile = config.sops.secrets."discourse-admin-password".path;
       username = "yisroeldbaum";
     };
     database.ignorePostgresqlVersion = true;
     hostname = "discourse.torahimderecheretz.com";
-    mail = {};
-    secretKeyBaseFile = "/run/secrets/discourse-secret-key";
+    mail = {
+      notificationEmailAddress = "noreply@discourse.torahimderecheretz.com";
+      contactEmailAddress = "";
+
+      outgoing = {
+        serverAddress = "in-v3.mailjet.com";
+        port = 587;
+        username = "1ebdd73d944240c1a9c3201e52a1e8c6";
+        passwordFile = config.sops.secrets."discourse-mail-key".path;
+        authentication = "login";
+      };
+    };
+    secretKeyBaseFile = config.sops.secrets."discourse-secret-key".path;
     siteSettings = {
       required = {
         title = "Torah Im Derech Eretz";
@@ -40,5 +51,12 @@
       owner = "discourse";
       group = "discourse";
     };
+    "discourse-mail-key" = {
+      sopsFile = ./secrets/discourseMailKey.yaml;
+      mode = "0400";
+      key = "key";
+      owner = "discourse";
+      group = "discourse";
+    };
   };
 }
diff --git a/secrets/discourseMailKey.yaml b/secrets/discourseMailKey.yaml
new file mode 100644
index 0000000..ff58b3b
--- /dev/null
+++ b/secrets/discourseMailKey.yaml
@@ -0,0 +1,16 @@
+key: ENC[AES256_GCM,data:Flvbs7sRCQ3BtSJXWurmVA+QQmvSo/fxrOVJNalBjj8=,iv:ddmk1XCjvNRmmqGhZwOWDlYSkdKz3ryyQwrav/T6Oz8=,tag:DvSjwdK01UAvBL1mYCe7kA==,type:str]
+sops:
+    age:
+        - recipient: age1haj8v88kjna6ttkdufjpyjcf478kyvclnpdc8jwh97ewhqcc9eqsgrku4v
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVUGFmM010b3NhdCtPME5O
+            RWRkUjF0akVEZVFtNkhZeUVSeWpWL3pKNG1nCllObGlPOTcrSyt1a2NCc0U4TVZM
+            cWVQbjJocEUySHFYaDFmNzllOGhuQWcKLS0tIHFJeFdUWENxK1RRSlhvSEI4NXlO
+            TG1wM1FTWjBBWHdHNnBUUE1kNWE4akUK1Ehv5kYNZrbf3m3vH5Oyy/g2mz8kIX8T
+            l2k1LbhUo3cNzIjkNM05RSrLZEBPItoo2nc9oTAPZiF1U/K76SMP6g==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-06-03T07:59:50Z"
+    mac: ENC[AES256_GCM,data:E4WwhOqUCmOBXwYUR5nFzth59F50KE7k88NkOBc6ERnX4b5joy0lmExenprH019UVJ/HSXOCWphUMwTat70uzwhaKBtlfa7AWmWyMa6zhIzxTsFagI4h1nWQP00uGb0MM3ULR3mcLtxXyTtZFWuY/d8ttdYBuv2oe29ikJTX610=,iv:gAZPLiYcNGq8LSEpIxDzDqdan+CJKyQ+SnQXHmponns=,tag:3tI0it3h6foT9W7zK3rmxg==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.12.2