gitea: enable emails (and password recovery)

nixbld-etc-nixos/configuration.nix

@@ -333,8 +333,15 @@ ACTION=="add", SUBSYSTEM=="tty", \
     appName = "M-Labs Git";
     cookieSecure = true;
     disableRegistration = true;
+    mailerPasswordFile = "/etc/nixos/secret/mailerpassword";
     extraConfig =
     ''
+    [mailer]
+    ENABLED = true
+    HOST = ssl.serverraum.org:587
+    FROM = sysop@m-labs.hk
+    USER = sysop@m-labs.hk
+
     [attachment]
     ALLOWED_TYPES = */*
     '';

nixbld-etc-nixos/secret_permissions.txt

@@ -1,6 +1,7 @@
 -rw------- 1 root         root           backup-passphrase
 -rw------- 1 root         root           email_accounts.nix
 -rw------- 1 homu         homu           homu.toml
+-rw-rw---- 1 gitea        gitea          mailerpassword
 -rw------- 1 matterbridge matterbridge   matterbridge.toml
 -rw------- 1 uwsgi        uwsgi          mattermost-github-integration.py
 -rw------- 1 nginx        nginx          muninpasswd