My personal NixOS configuration

Find a file

Evie Litherland-Smith 49f4725d9a Add self (nixos config flake) to registry as "nixos" Don't know why yet, but could be nice to have int the future. Note this the whole config flake, rather than just the pinned version of nixpkgs		2024-01-14 14:39:07 +00:00
home	SSH: add local forwarding to heimdall, change port for freia to avoid clash	2024-01-14 14:38:40 +00:00
hosts	Vanguard: enable v4l2loopback for virtual webcam in OBS	2024-01-12 22:06:16 +00:00
services	Remove Documents folder from syncthing	2024-01-13 08:37:45 +00:00
system	Remove git-sync services, issues with using pass	2024-01-14 12:54:45 +00:00
wallpapers	Rename wallpaper file	2023-12-18 08:50:43 +00:00
.gitignore	Update gitignore rules	2023-10-24 09:21:23 +01:00
.stylua.toml	Add custom styling to wezterm tab bar, move stylua.toml to top level directory	2023-02-19 12:16:22 +00:00
flake.lock	flake.lock: Update	2024-01-14 08:10:02 +00:00
flake.nix	Add self (nixos config flake) to registry as "nixos"	2024-01-14 14:39:07 +00:00
Makefile	Add switch back to Makefile	2023-12-22 07:19:13 +00:00
README.org	Switch mbsync from using secret-tool to password-store	2024-01-12 08:32:48 +00:00

README.org

README

Password store setup
- Transfer GPG key(s)
- Clone password-store repository
Email setup
- Proton
  - Bridge
    - uidvalidity issue
  - Password
- iCloud
  - Password
- Outlook
  - Password
  - Configuration

Password store setup

Transfer GPG key(s)

# Export key on existing machine
gpg --export-secret-keys > key.gpg
# Import key on new machine
gpg --import key.gpg
# Edit (for each key) to set trust
gpg --edit-key ...

Clone password-store repository

git clone https://git.xenia.me.uk/xenia/pass $PASSWORD_STORE_DIR

Email setup

Proton

Bridge

Docker source: Docker / GitHub - shenxn/protonmail-bridge-docker: ProtonMail IMAP/SMTP Bridge Docker …

To initialise:

podman kill protonmail-bridge && podman run --rm -it -v protonmail:/root shenxn/protonmail-bridge init
# Restart so that service picks up available ports
podman kill protonmail-bridge

and follow normal login system for cli. systemd unit handles running container on boot after this.

uidvalidity issue

Remove uid lines from .mbsyncrc (in each mail directory) and delete .uidvalidity, re-run mbsync to fix

Password

Get password from protonmail-bridge, save to password-store:

  pass insert mbsync/$(hostname)/proton
  # Insert pass at prompt

iCloud

Password

If not already done, save password to password-store:

  pass insert mbsync/$(hostname)/icloud
  # Insert pass at prompt

This will be synced across devices so only needs doing once

Outlook

Password

If not already done, save password to password-store:

  pass insert mbsync/$(hostname)/outlook
  # Insert pass at prompt

This will be synced across devices so only needs doing once

Configuration

On first run (or if token expires), stop systemd service and run manually to complete manual auth. Token will stay valid for a little while (no idea how long specifically).

# Restart service to ensure ~/.davmail.properties exists
systemctl --user restart davmail.service
# Run to use manual authentication
systemctl --user stop davmail.service && davmail -notray ~/.davmail.properties
# Restart again so that service picks up available ports
systemctl --user restart davmail.service