From 742b5150ce7e283ddd30e15947fe47ec8d73bb7b Mon Sep 17 00:00:00 2001
From: toufic ar <contact@toufy.me>
Date: Wed, 28 Jan 2026 19:35:01 +0200
Subject: [PATCH] add radicale htpasswd file manually

---
 config/mail/default.nix | 3 ++-
 secrets.yaml            | 5 +++--
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/config/mail/default.nix b/config/mail/default.nix
index 0c10f2e..26ddf50 100644
--- a/config/mail/default.nix
+++ b/config/mail/default.nix
@@ -3,6 +3,7 @@
 in {
   sops.secrets = {
     "mailserver/contact".owner = "dovecot2";
+    "radicale".owner = "radicale";
   };
 
   mailserver = {
@@ -76,7 +77,7 @@ in {
     settings = {
       auth = {
         type = "htpasswd";
-        htpasswd_filename = "/run/secrets/mailserver";
+        htpasswd_filename = config.sops.secrets."radicale".path;
         htpasswd_encryption = "bcrypt";
       };
     };
diff --git a/secrets.yaml b/secrets.yaml
index e9d6535..1e82c00 100644
--- a/secrets.yaml
+++ b/secrets.yaml
@@ -5,6 +5,7 @@ ssh:
 mailserver:
     contact: ENC[AES256_GCM,data:VjQfXiEzvBrIeLwLtS2UPjG/fAICk3hUtFPRKHN+v7cd8aSc45u90Ho3uKyKvnIaVyfoRwN21NvK4Vbb,iv:VJbxNwzipmV2yIruBsHX4z/FNy+AJq8Xp97bw/Bogpc=,tag:bc3BwY4xQNmQbQZpIEynYQ==,type:str]
     forgejo: ENC[AES256_GCM,data:7bZQ5+WET1aAFXO2+R9kt9aA2PpEqhDaj9IE1t4UEgGNzn5D+tRsh+YEI73PPTRmjH7p8HKoo/eutVj3,iv:FD+gjIz5/o1sZGWRMMQEzoX09UJD8Ptk37GuMGcnB7o=,tag:6syos0wvs2e98JNyIoFHsg==,type:str]
+radicale: ENC[AES256_GCM,data:giSJzUrRIv/D36RhaXLKDeUvxEhuduhNInTmliv+2l054PCCscMc2fos8JupL5hIFDopxvxxt4gYG397je67XKR6wfsAEtK/ZjLIRhmq0eIi9HKMal5za2fsnhrvOJD/7ES/igV25tyZFqIozbqCKNDxxapzen3ZUF7vF3QhI80i/mXrOp+QKxP5,iv:+07j221b4ISYpXT95JOy+k3J0uLFxeBr0/v0UJ5zmvU=,tag:8HAmMF+1uJTSiy2DCrkuUA==,type:str]
 searx: ENC[AES256_GCM,data:n451XLvOi2D2YvL0/+ko+HyXWEU7uuVlivkFsKxIzq1EWqMVEhFgEAt1k8W15AdgLY1xo455fUbL6/W1uSFO8w==,iv:QfX7s4l4QuZ8/85Q/+0OWezDGqOKXdY7B5M6wq/5tAM=,tag:ppZXewIAN0IdRMgrIIKTmg==,type:str]
 actions_runner:
     token: ENC[AES256_GCM,data:K3l1i8TlOh4P0m0HvI/U97weP2BzPxkiz1DYvAFL8ergFVYHsE62A92rVxIAlQ==,iv:BIITpfqKa/IA7dQfmoNTA2dhB91jn7Ay7Ihib+2Mddg=,tag:Ojk4407BhM7b4LjmnPuZjA==,type:str]
@@ -23,7 +24,7 @@ sops:
             L0NsZWFmd3UwblExc3UrVVVraHVTTm8KyUN1t1NgQG8+zHViKXT4fwnuFBVgzhYw
             WbCHfzut3a55ta1B50hQGFlPcUZDPImUg4wKmkdc7vurg02vOTgwUQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-01-28T16:51:31Z"
-    mac: ENC[AES256_GCM,data:WEbG4365DWEy9Fz/SyP6uI8Vr6+wbi6o5J82lxvTB7QXLMqXSKyKdMMy1LOdiY2EVnXIBlgC9rzMJoJgwr00SdgVjH/ZJRZWjM7f8qk8yUzMqnMk+M82/SqD6pLqoLrguuSEsRgHSHNSt5qn0mH4vJ6OABAiquCsRHy4swe6Z8g=,iv:1WPSoebje5WRTIe7ww2/9iLpeVvS4xS/SRharN8B4/s=,tag:a28eAA7d3tHL3rQ+gQkFHQ==,type:str]
+    lastmodified: "2026-01-28T17:33:24Z"
+    mac: ENC[AES256_GCM,data:pNG5CoNU5ThwgP+QALVox0H9Sf7wQALA/I6rnXUJvacajxA9eB2fR8Fp1o4C6OoNZ+o69RgRuLdj781E0D//Ww5SaVTr/QneqxzJeViJaMA/iDWZ0XQC6MiHEfeYeCCIywRm62VuYcwswrqIi2Z+gxiNBQgkXeO+xAMJfOCKXfo=,iv:1/F6PFnEghjz0dvcsELLEnoDV6pd5x2rbzJ/P3P4JfY=,tag:2ViRK4b5Puei//LY17lmAQ==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.11.0