From 3a2dd0cc0b6a47521eb6679ffbc60d9d75e0be9c Mon Sep 17 00:00:00 2001
From: Romain Paquet <rpqt@rpqt.fr>
Date: Wed, 31 Dec 2025 00:32:37 +0100
Subject: [PATCH] configure email for aerc

---
 home-manager/mail/default.nix | 43 +++++++++++++++++++++++++++++++----
 1 file changed, 39 insertions(+), 4 deletions(-)

diff --git a/home-manager/mail/default.nix b/home-manager/mail/default.nix
index aefae53..fba8674 100644
--- a/home-manager/mail/default.nix
+++ b/home-manager/mail/default.nix
@@ -1,4 +1,7 @@
 { config, ... }:
+let
+  pass = "passage";
+in
 {
   programs.thunderbird = {
     enable = true;
@@ -9,24 +12,44 @@
     };
   };
 
+  programs.aerc = {
+    enable = true;
+    # safe since the accounts file just contains commands for retrieving passwords and is readonly in the nix store
+    extraConfig.general.unsafe-accounts-conf = true;
+  };
+
   accounts.email.accounts = {
-    "rpqt@rpqt.fr" = {
+    "rpqt@rpqt.fr" = rec {
       address = "rpqt@rpqt.fr";
       realName = "Romain Paquet";
       primary = true;
       flavor = "migadu.com";
       thunderbird.enable = config.programs.thunderbird.enable;
+      aerc.enable = config.programs.aerc.enable;
+      passwordCommand = [
+        pass
+        "show"
+        "mail/${address}"
+      ];
+      folders.inbox = "INBOX";
     };
 
-    "admin@rpqt.fr" = {
+    "admin@rpqt.fr" = rec {
       address = "admin@rpqt.fr";
       aliases = [ "postmaster@rpqt.fr" ];
       realName = "Postmaster";
       flavor = "migadu.com";
       thunderbird.enable = config.programs.thunderbird.enable;
+      aerc.enable = config.programs.aerc.enable;
+      passwordCommand = [
+        pass
+        "show"
+        "mail/${address}"
+      ];
+      folders.inbox = "INBOX";
     };
 
-    "romain.paquet@grenoble-inp.org" = {
+    "romain.paquet@grenoble-inp.org" = rec {
       address = "romain.paquet@grenoble-inp.org";
       realName = "Romain Paquet";
       userName = "romain.paquet@grenoble-inp.org";
@@ -39,14 +62,26 @@
         port = 465;
       };
       thunderbird.enable = config.programs.thunderbird.enable;
+      aerc.enable = config.programs.aerc.enable;
+      passwordCommand = [
+        pass
+        "show"
+        "mail/${address}"
+      ];
+      folders.inbox = "INBOX";
     };
 
-    "admin@turifer.dev" = {
+    "admin@turifer.dev" = rec {
       address = "admin@turifer.dev";
       aliases = [ "postmaster@turifer.dev" ];
       realName = "Postmaster";
       flavor = "migadu.com";
       thunderbird.enable = config.programs.thunderbird.enable;
+      aerc.enable = config.programs.aerc.enable;
+      passwordCommand = [
+        pass
+        "mail/${address}"
+      ];
     };
 
     "romain@student.agh.edu.pl" = {