nixos/README.org

README

• [0/1] Tasks
  • Re-write Hyprland config
• Password store setup
  • Transfer GPG key(s)
  • Clone password-store repository
• Email setup
  • Proton
    • Bridge
    • Password
  • iCloud
    • Password
  • UKAEA
    • Password
    • Configuration
• Vdirsyncer
  • Password

[0/1] Tasks

TODO Re-write Hyprland config

Convert from linked text file to proper nix expression (using home-manager)

Password store setup

Transfer GPG key(s)

# Export key on existing machine
gpg --export-secret-keys > key.gpg
# Import key on new machine
gpg --import key.gpg
# Edit (for each key) to set trust
gpg --edit-key ...

Clone password-store repository

git clone https://git.xenia.me.uk/xenia/pass $PASSWORD_STORE_DIR

Email setup

Proton

Bridge

Docker source: Docker / GitHub - shenxn/protonmail-bridge-docker: ProtonMail IMAP/SMTP Bridge Docker …

To initialise:

systemctl --user disable --now protonmail-bridge.service && podman run --rm -it -v protonmail:/root shenxn/protonmail-bridge init

and follow normal login system for cli. systemd unit handles running container on boot after this.

Recreate and enable services after modifying:

systemctl restart home-manager-$(whoami).service && systemctl --user restart protonmail-bridge.service
# If resetting container need to clear old mail objects and re-fetch
rm -rf $HOME/.mail/Proton/*

Password

Get password from protonmail-bridge, register with gnome-keyring:

secret-tool store --label="Proton mail mbsync" email e.litherlandsmith@proton.me

iCloud

Password

Register app-password with gnome-keyring:

secret-tool store --label="iCloud mail mbsync" email e.litherlandsmith@icloud.com

UKAEA

Password

Register app-password with gnome-keyring:

secret-tool store --label="UKAEA mail mbsync" email evie.litherland-smith@ukaea.uk

Configuration

On first run (or if token expires), stop systemd service and run manually to complete manual auth. Token will stay valid for a little while (no idea how long specifically).

# Restart service to ensure ~/.davmail.properties exists
systemctl --user restart davmail.service
# Disable service and run to use manual authentication
systemctl --user disable --now davmail.service && davmail -notray ~/.davmail.properties

Recreate and enable services after modifying:

systemctl restart home-manager-$(whoami).service && systemctl --user restart davmail.service

Vdirsyncer

Password

Register app-password with gnome-keyring;

secret-tool store --label="NextCloud" url cloud.xenia.me.uk