feat(accounts): add Fastmail configuration with Himalaya support

home/accounts/default.nix

@@ -0,0 +1,5 @@
+{...}: {
+  imports = [
+    ./fastmail.nix
+  ];
+}

home/accounts/fastmail.nix

@@ -0,0 +1,39 @@
+{config, ...}: {
+  sops = {
+    secrets."accounts/mail/fastmail" = {};
+  };
+  accounts.email = {
+    maildirBasePath = "Mail";
+    accounts = {
+      fastmail = rec {
+        maildir = {
+          path = "fastmail";
+        };
+        primary = true;
+        address = "email@uttarayan.me";
+        userName = address;
+        realName = "Uttarayan Mondal";
+        imap = {
+          host = "imap.fastmail.com";
+          port = 993;
+          tls.enable = true;
+          authentication = "login";
+        };
+        smtp = {
+          host = "smtp.fastmail.com";
+          port = 465;
+          tls.enable = true;
+        };
+        imapnotify = {
+          enable = true;
+        };
+        passwordCommand = ["cat" "${config.sops.secrets."accounts/mail/fastmail".path}"];
+        mbsync = {
+          enable = true;
+          create = "both";
+        };
+      };
+    };
+  };
+  services.mbsync.enable = true;
+}

home/default.nix

@@ -14,6 +14,7 @@
     ./programs
     ./scripts.nix
     ./services
+    ./accounts
   ];
 
   xdg.enable = true;

home/programs/default.nix

@@ -35,6 +35,7 @@
     ./yt-dlp.nix
     ./zoxide.nix
     ./television.nix
+    ./himalaya.nix
 
     # ./goread.nix
     # ./helix.nix

home/programs/himalaya.nix

@@ -0,0 +1,13 @@
+{device, ...}: {
+  programs.himalaya = {
+    enable = true;
+  };
+  accounts.email.accounts.fastmail.himalaya = {
+    enable = true;
+    settings = {
+      downloads-dir = "${device.home}/Mail";
+      backend.type = "maildir";
+      backend.root-dir = "~/Mail";
+    };
+  };
+}

nixos/mirai/services/lldap.nix

@@ -20,11 +20,6 @@
       '';
     };
   };
-  # services.caddy = {
-  #   # virtualHosts."ldap.darksailor.dev".extraConfig = ''
-  #   #   reverse_proxy localhost:5090
-  #   # '';
-  # };
   users.users.lldap = {
     name = "lldap";
     group = "lldap";

secrets/secrets.yaml

@@ -3,6 +3,9 @@ nextcloud:
 paperless:
     adminpass: ENC[AES256_GCM,data:SkW+uh8/WlpJOgEF5GIIt5UygLU=,iv:KaKAmqJxSs822be6FsthJZ3dactgOckwrXLNa3dx350=,tag:40kSGe1O5d6killRdZiSYQ==,type:str]
     secret_key: ENC[AES256_GCM,data:9OkJ/WRLHCQXA0a/FqMieoUX5Lk=,iv:br2OSWU6uQ4/JAEvYeRlA1buhF2PGyPCdGYx0OwROek=,tag:cgnmTTWgkga6E0krWXFIdw==,type:str]
+accounts:
+    mail:
+        fastmail: ENC[AES256_GCM,data:WCqmJqUjJz/mUdVB9xDvYQ==,iv:uU3X7/doSz6v0c8eHfB6riOkxWoWqYhbsoexaZwdb4Q=,tag:0oSRXo93siNQDlOgPA3Hsw==,type:str]
 gitea:
     registration: ENC[AES256_GCM,data:2czx/AhyAuC0TjrozA/K3VLDBpSuGODLpJLCs5oWNgusZcehW2aL0w==,iv:Xqe3bKTfHGbO/XYFhAdG7OiB3L0cfcNeehuzCKZ7SGw=,tag:57Say1JMrEIvleDk/26ZZg==,type:str]
 llama:
@@ -76,7 +79,7 @@ sops:
             VGZKdHpVeFRpQUxtSEkyaEhLMlBJcGsKLb0DvPNZosPBUuiX6qz1s5IO5INQh8CK
             ZtXTVClwMSmaUYhdSB2gKFrKVZHXTJZ4oAL5t/BpC0pOHyr+o96T3Q==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-08-24T09:09:52Z"
+    lastmodified: "2025-09-09T08:37:12Z"
-    mac: ENC[AES256_GCM,data:zpLVBjoJz4bd3vG1c3fILeVMLznt+2RQm7QBIutxVJLWBkLdRQ0fIBcaOI+ZNd8+17bhgK2roVpTyKb7qlZ30XU4kCGGCE6/8YveDvSwtN8wDNS2USIRfGbtYljOwvXaCCXt0y/YwNnwYtY8RLWcuQg8vhfk6yIPyZcx1CIbHFU=,iv:W/6zntv7Mto06xldzrucQOIwvEKw9n+zRz1M1ZRm0TU=,tag:YGzEK7d5vFgrlLaIS5zPkw==,type:str]
+    mac: ENC[AES256_GCM,data:U9KWj45qH9kYpPpHScz6/8s2FtrJHOpnQScOIkrsu3N+V5i4C0LR+OTCoiTFDIXNMHKpPMR53NCKtwwhXlM6kFgLjNd0QGKVjkug8Afa081VR4DJdIXa5IpnwguJtB8Cwi7WavZSbyKTDCd850tQP3JiWvrUNoSVtfXM3WkO+YQ=,iv:8HA7KPqMXBvnQ8MH3M0RPrrhOI7+NotbS7E8sKTox/g=,tag:vwSpqparVeuHunjtQHCAmg==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.10.2