feat(ami): set up msmtp to send email through forgejo later on

Currently not working as Hetzner is blocking the relevant ports.

hosts/ami/default.nix

@@ -16,6 +16,7 @@
     ./disk-config.nix
     ./forgejo.nix
     ./murmur.nix
+    ./msmtp.nix
     ./website.nix
 
     ../../users/maintainer

hosts/ami/msmtp.nix

@@ -0,0 +1,21 @@
+{config, ...}: {
+  age.secrets.msmtppassword = {
+    file = ../../secrets/msmtppassword.age;
+    mode = "770";
+    owner = "forgejo";
+    group = "forgejo";
+  };
+
+  programs.msmtp = {
+    enable = true;
+    accounts.default = {
+      host = "smtp.fastmail.com";
+      domain = "buffets.kitchen";
+      tls = true;
+      tls_starttls = false;
+      auth = "plain";
+      user = "mail@buffet.sh";
+      passwordeval = "cat ${config.age.secrets.msmtppassword.path}";
+    };
+  };
+}

secrets.nix

@@ -3,4 +3,5 @@ let
 in {
   "secrets/bitwarden.age".publicKeys = [buffet];
   "secrets/borgpassword.age".publicKeys = [buffet];
+  "secrets/msmtppassword.age".publicKeys = [buffet];
 }

secrets/msmtppassword.age

@@ -0,0 +1,5 @@
+age-encryption.org/v1
+-> ssh-ed25519 zRvPWg jGsV1pjcJF/1DIYKxQuK8MVdtGb5j/AxUxPIgZkKPxo
+/kCfvNexkWL49MmZztpnt6FDOHqiVi7OVh5k4HDmhG0
+--- kHNbaMm2DRzSsCEPop4gXrKmBb/BSAG45xHeWyQfAkY
+Ç¿8Ë*	v—˜§xèHòqê[êz˜&½ì¸zÏ¯é½jÏŒŽ<C592>n,2±ã[™gø