chore: update secrets

home-manager-modules/mails/default.nix

@@ -31,10 +31,15 @@ with lib;
       file = ../../secrets/ens-mail-pw.age;
     };
 
-    programs.mbsync.enable = true;
+    programs.mbsync = {
+      enable = true;
+      package = pkgs.unstable.isync;
+    };
+
     programs.msmtp.enable = true;
     accounts.email = {
       accounts.ens = {
+        notmuch.enable = true;
         folders.inbox = "INBOX";
         address = "julien.malka@ens.fr";
         imap.host = "clipper.ens.fr";
@@ -55,6 +60,7 @@ with lib;
         userName = "jmalka";
       };
       accounts.work = {
+        notmuch.enable = true;
         folders.inbox = "INBOX";
         address = "julien@malka.sh";
         imap.host = "mail.luj.fr";
@@ -76,6 +82,7 @@ with lib;
       };
 
       accounts.telecom = {
+        notmuch.enable = true;
         folders.inbox = "INBOX";
         address = "julien.malka@telecom-paris.fr";
         imap.host = "z.imt.fr";
@@ -97,6 +104,7 @@ with lib;
       };
 
       accounts.dgnum = {
+        notmuch.enable = true;
         folders.inbox = "INBOX";
         address = "luj@dgnum.eu";
         imap.host = "kurisu.lahfa.xyz";
@@ -122,7 +130,32 @@ with lib;
     services.mbsync = {
       enable = true;
       frequency = "minutely";
-      verbose = true;
+      package = pkgs.unstable.isync;
+    };
+
+    services.mbsync.postExec = "${pkgs.notmuch}/bin/notmuch new";
+    programs.notmuch = {
+      enable = true;
+      new.tags = [ "new" ];
+      hooks.postNew = ''
+        ${pkgs.afew}/bin/afew --tag --new
+      '';
+    };
+
+    programs.afew = {
+      enable = true;
+      extraConfig = ''
+        [FolderNameFilter]
+        maildir_separator = /
+        folder_lowercases = true
+        folder_blacklist = Sent 
+        [ArchiveSentMailsFilter]
+        sent_tag = sent
+        [Filter.1]
+        query = tag:archive
+        tags = -new
+        [InboxFilter]
+      '';
     };
 
   };

lon.lock

@@ -77,9 +77,9 @@
       "owner": "nix-community",
       "repo": "home-manager",
       "branch": "release-24.11",
-      "revision": "bd65bc3cde04c16755955630b344bc9e35272c56",
-      "url": "https://github.com/nix-community/home-manager/archive/bd65bc3cde04c16755955630b344bc9e35272c56.tar.gz",
-      "hash": "sha256-dinzAqCjenWDxuy+MqUQq0I4zUSfaCvN9rzuCmgMZJY="
+      "revision": "9d3d080aec2a35e05a15cedd281c2384767c2cfe",
+      "url": "https://github.com/nix-community/home-manager/archive/9d3d080aec2a35e05a15cedd281c2384767c2cfe.tar.gz",
+      "hash": "sha256-Gs076ot1YuAAsYVcyidLKUMIc4ooOaRGO0PqTY7sBzA="
     },
     "home-manager-unstable": {
       "type": "GitHub",
@@ -87,9 +87,9 @@
       "owner": "nix-community",
       "repo": "home-manager",
       "branch": "master",
-      "revision": "5031c6d2978109336637977c165f82aa49fa16a7",
-      "url": "https://github.com/nix-community/home-manager/archive/5031c6d2978109336637977c165f82aa49fa16a7.tar.gz",
-      "hash": "sha256-NxNe32VB4XI/xIXrsKmIfrcgtEx5r/5s52pL3CpEcA4="
+      "revision": "c630dfa8abcc65984cc1e47fb25d4552c81dd37e",
+      "url": "https://github.com/nix-community/home-manager/archive/c630dfa8abcc65984cc1e47fb25d4552c81dd37e.tar.gz",
+      "hash": "sha256-gBlb8R9gnjUAT5XabJeel3C2iEUiBHx3+91651y3Sqo="
     },
     "impermanence": {
       "type": "GitHub",
@@ -157,9 +157,9 @@
       "owner": "nixos",
       "repo": "nixpkgs",
       "branch": "nixos-24.11",
-      "revision": "0ff09db9d034a04acd4e8908820ba0b410d7a33a",
-      "url": "https://github.com/nixos/nixpkgs/archive/0ff09db9d034a04acd4e8908820ba0b410d7a33a.tar.gz",
-      "hash": "sha256-9xim3nJJUFbVbJCz48UP4fGRStVW5nv4VdbimbKxJ3I="
+      "revision": "ebe2788eafd539477f83775ef93c3c7e244421d3",
+      "url": "https://github.com/nixos/nixpkgs/archive/ebe2788eafd539477f83775ef93c3c7e244421d3.tar.gz",
+      "hash": "sha256-yfDy6chHcM7pXpMF4wycuuV+ILSTG486Z/vLx/Bdi6Y="
     },
     "proxmox": {
       "type": "GitHub",
@@ -186,9 +186,9 @@
       "owner": "nixos",
       "repo": "nixpkgs",
       "branch": "nixos-unstable",
-      "revision": "2ff53fe64443980e139eaa286017f53f88336dd0",
-      "url": "https://github.com/nixos/nixpkgs/archive/2ff53fe64443980e139eaa286017f53f88336dd0.tar.gz",
-      "hash": "sha256-+/bYK3DbPxMIvSL4zArkMX0LQvS7rzBKXnDXLfKyRVc="
+      "revision": "e3e32b642a31e6714ec1b712de8c91a3352ce7e1",
+      "url": "https://github.com/nixos/nixpkgs/archive/e3e32b642a31e6714ec1b712de8c91a3352ce7e1.tar.gz",
+      "hash": "sha256-7rTAMNTY1xoBwz0h7ZMtEcd8LELk9R5TzBPoHuhNSCk="
     }
   }
 }

machines/fischer/default.nix

@@ -125,6 +125,10 @@
     mu
   ];
 
+  networking.hosts = {
+    "172.25.90.82" = [ "ducati-diavel" ];
+  };
+
   services.printing = {
     enable = true;
     extraConf = ''

machines/gustave/default.nix

@@ -21,6 +21,15 @@
     "${inputs.unstable}/nixos/modules/services/web-apps/readeck.nix"
   ];
 
+  users.users.julien.linger = true;
+
+  services.openssh.extraConfig = ''
+    HostCertificate /etc/ssh/ssh_host_ed25519_key-cert.pub
+    HostKey /etc/ssh/ssh_host_ed25519_key
+    TrustedUserCAKeys /etc/ssh/ssh_user_key.pub
+    MaxAuthTries 20
+  '';
+
   machine.meta = {
     arch = "x86_64-linux";
     nixpkgs_version = inputs.nixpkgs;
@@ -46,6 +55,7 @@
     nginx.subdomain = "docs";
   };
 
+  security.polkit.enable = true;
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
   programs.fuse.userAllowOther = true;

machines/gustave/home-julien.nix

@@ -2,44 +2,22 @@
 {
   luj.hmgr.julien = {
 
+    luj.emails.enable = true;
+    luj.programs.fish.enable = true;
+    systemd.user.startServices = "sd-switch";
+
     home.persistence."/persistent/home/julien" = {
-      files = [
-        ".config/gnome-initial-setup-done"
-        ".config/background"
-        ".cert/nm-openvpn/telecom-paris-ca.pem"
-        ".local/share/com.ranfdev.Notify.sqlite"
-      ];
       directories = [
-        "Pictures"
-        "Documents"
         ".ssh"
-        ".mozilla"
-        "devold"
-        ".config/cosmic"
         ".local/share/direnv"
-        ".local/state/cosmic-comp"
-        ".local/share/atuin"
-        ".local/share/firefoxpwa"
-        ".config/Signal"
-        ".cache/spotify"
-        ".config/spotify"
-        ".config/autostart"
-        ".config/borg"
-        ".config/pika-backup"
-        ".config/Element"
-        ".step"
-        ".emacs.d"
         ".gnupg"
-        "Zotero"
-        ".config/dconf"
         ".local/share/keyrings"
-        ".cache/mu"
         "Maildir"
       ];
       allowOther = true;
     };
 
     home.stateVersion = "23.11";
-    home.packages = [ pkgs.hello ];
+    home.packages = [ pkgs.muchsync ];
   };
 }

secrets/secrets.nix

@@ -87,10 +87,12 @@ in
   ];
   "arkheon-token.age".publicKeys = servers;
   "borg-ssh-priv.age".publicKeys = [
+    gustave
     akhaten
     tower
   ];
   "borg-encryption-secret.age".publicKeys = [
+    gustave
     akhaten
     tower
   ];

users/julien.nix

@@ -19,6 +19,10 @@
     shell = pkgs.fish;
     hashedPasswordFile = config.age.secrets.julien-password.path;
     openssh.authorizedPrincipals = [ "julien" ];
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMAa0wll9ildhgPiV0DhgJXXtw3TQr5VkNxxxPspHSbX julien@gallifrey"
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIADCpuBL/kSZShtXD6p/Nq9ok4w1DnlSoxToYgdOvUqo julien@telecom"
+    ];
   };
 
   nix.settings.allowed-users = [ "julien" ];