feat(package): remove useless packages

feat(bomba): add mail

flake.lock

@@ -46,6 +46,22 @@
         "type": "github"
       }
     },
+    "blobs": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1604995301,
+        "narHash": "sha256-wcLzgLec6SGJA8fx1OEN1yV/Py5b+U5iyYpksUY/yLw=",
+        "owner": "simple-nixos-mailserver",
+        "repo": "blobs",
+        "rev": "2cccdf1ca48316f2cfd1c9a0017e8de5a7156265",
+        "type": "gitlab"
+      },
+      "original": {
+        "owner": "simple-nixos-mailserver",
+        "repo": "blobs",
+        "type": "gitlab"
+      }
+    },
     "client-ts-generator-src": {
       "flake": false,
       "locked": {
@@ -94,6 +110,22 @@
         "type": "github"
       }
     },
+    "flake-compat_3": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1767039857,
+        "narHash": "sha256-vNpUSpF5Nuw8xvDLj2KCwwksIbjua2LZCqhV1LNRDns=",
+        "owner": "NixOS",
+        "repo": "flake-compat",
+        "rev": "5edf11c44bc78a0d334f6334cdaf7d60d732daab",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "repo": "flake-compat",
+        "type": "github"
+      }
+    },
     "flake-parts": {
       "inputs": {
         "nixpkgs-lib": "nixpkgs-lib"
@@ -191,6 +223,31 @@
         "type": "github"
       }
     },
+    "git-hooks": {
+      "inputs": {
+        "flake-compat": [
+          "simple-mailserver",
+          "flake-compat"
+        ],
+        "nixpkgs": [
+          "simple-mailserver",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1784288435,
+        "narHash": "sha256-ReRHaLgr/uVqdD8afFSn+myXIfpHeOhP0yYe0TJqAA8=",
+        "owner": "cachix",
+        "repo": "git-hooks.nix",
+        "rev": "43b3c1ab9d40fb1dbb008f451988a91e375825e9",
+        "type": "github"
+      },
+      "original": {
+        "owner": "cachix",
+        "repo": "git-hooks.nix",
+        "type": "github"
+      }
+    },
     "home-manager": {
       "inputs": {
         "nixpkgs": [
@@ -394,6 +451,22 @@
         "type": "github"
       }
     },
+    "nixpkgs_5": {
+      "locked": {
+        "lastModified": 1786548149,
+        "narHash": "sha256-pBv1JbhCqqMcF5ciyLi8D9nzVyw4Gv2sk/tcGF4mBHA=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "5df1f9ae934fe1bffbd3867a1ae2870ab22302ed",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-unstable-small",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
     "nixvim": {
       "inputs": {
         "flake-utils": "flake-utils_2",
@@ -515,9 +588,31 @@
         "nixpkgs-my-features": "nixpkgs-my-features",
         "nixvim": "nixvim",
         "noctalia": "noctalia",
+        "simple-mailserver": "simple-mailserver",
         "sops-nix": "sops-nix"
       }
     },
+    "simple-mailserver": {
+      "inputs": {
+        "blobs": "blobs",
+        "flake-compat": "flake-compat_3",
+        "git-hooks": "git-hooks",
+        "nixpkgs": "nixpkgs_5"
+      },
+      "locked": {
+        "lastModified": 1786567397,
+        "narHash": "sha256-H713vbgy+n1asVNn/0kBwbFgroNgC1dnx8pEMKcFdgk=",
+        "owner": "simple-nixos-mailserver",
+        "repo": "nixos-mailserver",
+        "rev": "e668474df221aeef1ebd374d0364aa07f1d4f827",
+        "type": "gitlab"
+      },
+      "original": {
+        "owner": "simple-nixos-mailserver",
+        "repo": "nixos-mailserver",
+        "type": "gitlab"
+      }
+    },
     "sops-nix": {
       "inputs": {
         "nixpkgs": [

flake.nix

@@ -4,6 +4,7 @@
     nixpkgs-25-11.url = "github:nixos/nixpkgs/nixos-25.11";
     nixpkgs-my-features.url = "github:Superredstone/nixpkgs/my-features";
     nix-cachyos-kernel.url = "github:xddxdd/nix-cachyos-kernel/release";
+    simple-mailserver.url = "gitlab:simple-nixos-mailserver/nixos-mailserver";
     home-manager = {
       url = "github:nix-community/home-manager";
       inputs.nixpkgs.follows = "nixpkgs";
@@ -42,6 +43,7 @@
       noctalia,
       nixflix,
       authentik-nix,
+      simple-mailserver,
       ...
     }@inputs:
     let
@@ -56,6 +58,7 @@
           nixvim
           sops-nix
           noctalia
+          simple-mailserver
           inputs
           nixpkgs
           nixpkgs-25-11
@@ -93,6 +96,7 @@
         additionalModules = [
           nixflix.nixosModules.default
           authentik-nix.nixosModules.default
+          simple-mailserver.nixosModules.default
         ];
       };
       nixosConfigurations."frog" = mkSystem "frog" {

home/default.nix

@@ -10,11 +10,18 @@
     ./fish.nix
     ./git.nix
     ./kitty.nix
-    ./mangohud.nix
     ./tmux.nix
-    ./vesktop.nix
     ./zoxide.nix
   ]
+  ++ (
+    if currentSystemDe != "none" then
+      [
+        ./mangohud.nix
+        ./vesktop.nix
+      ]
+    else
+      [ ]
+  )
   ++ (if currentSystemDe == "gnome" then [ ./gnome.nix ] else [ ])
   ++ (if currentSystemDe == "niri" then [ ./niri.nix ] else [ ]);
 

home/kitty.nix

@@ -1,7 +1,7 @@
-{ pkgs, currentSystemDe, ... }:
+{ pkgs, ... }:
 {
   programs.kitty = {
-    enable = currentSystemDe != "none";
+    enable = true;
     themeFile = "Catppuccin-Mocha";
     extraConfig = "		";
     enableGitIntegration = true;

lib/mksystem.nix

@@ -4,6 +4,7 @@
   nixvim,
   sops-nix,
   noctalia,
+  simple-mailserver,
   inputs,
   nixpkgs,
   nixpkgs-25-11,
@@ -32,6 +33,7 @@ let
       workSystem
       enableZram
       nixvim
+      simple-mailserver
       sops-nix
       noctalia
       inputs

machines/bomba/secrets.nix

@@ -1,4 +1,4 @@
-{... }:
+{ ... }:
 {
   sops =
     let
@@ -27,6 +27,7 @@
         authentik_env = default;
         vaultwarden_env = default;
         vikunja_env = default;
+        mail_password = default;
       };
     };
 }

machines/bomba/services/caddy.nix

@@ -22,6 +22,10 @@
           root /var/www/patrickcanal.it/public
           file_server
         '';
+        "mail.patrickcanal.it".extraConfig = ''
+          root /var/www/patrickcanal.it/public
+          file_server
+        '';
         "vaultwarden.patrickcanal.it".extraConfig = ''
           encode zstd gzip
           reverse_proxy :8003 {

machines/bomba/services/default.nix

@@ -8,6 +8,7 @@
     ./fail2ban.nix
     ./gitea.nix
     ./homebox.nix
+    ./mail.nix
     ./navidrome.nix
     ./nextcloud.nix
     ./nixflix.nix

machines/bomba/services/mail.nix

@@ -0,0 +1,39 @@
+{ config, ... }:
+let
+  fqdn = "mail.patrickcanal.it";
+in
+{
+  security.acme = {
+    acceptTerms = true;
+    certs."mail.patrickcanal.it" = {
+      webroot = "/var/www/patrickcanal.it/public/";
+    };
+  };
+
+  mailserver = {
+    enable = true;
+    stateVersion = 5;
+    fqdn = fqdn;
+    domains = [ "patrickcanal.it" ];
+
+    # Reference the existing ACME configuration created by nginx
+    x509.useACMEHost = fqdn;
+
+    # A list of all login accounts. To create the password hashes, use
+    # nix-shell -p mkpasswd --run 'mkpasswd -s'
+    accounts = {
+      "me@patrickcanal.it" = {
+        hashedPassword = "$y$j9T$zEKbsELY3HcPZq9CH6bSe0$T9syGTl9haNhjS5SNjDbrY5uoN5z/LCYEmbFowFcAP/";
+
+        # Additional addresses delivered to this mailbox
+        aliases = [
+          "postmaster@patrickcanal.it"
+          "io@patrickcanal.it"
+        ];
+      };
+      "auth@patrickcanal.it" = {
+        hashedPassword = "$y$j9T$JqqefR6flaaJBRjD4KVZc1$QM6h4Spr5.yn/FuIT.ydTV22daEbiVd8ZprV/POtPgB";
+      };
+    };
+  };
+}

modules/packages.nix

@@ -30,7 +30,6 @@
         devenv
         dig
         distrobox
-        docker
         dua
         fd
         file
@@ -75,16 +74,13 @@
 
       guiPackages = lib.optionals (currentSystemDe != "none") [
         android-studio
-        baobab
         bazaar
         brave
         cinny-desktop
         firefox
         fladder
-        gapless
         gimp
         mpv
-        nautilus
         nextcloud-client
         obs-studio
         qbittorrent
@@ -92,7 +88,6 @@
         seahorse
         telegram-desktop
         thunderbird
-        tor-browser
         vesktop
         vlc
         vulkan-tools
@@ -100,18 +95,15 @@
       ];
 
       gamingPackages = lib.optionals gamingSystem [
-        arrpc
         cura-appimage
         heroic
         obs-studio
-        openrgb
         prismlauncher
         satisfactorymodmanager
       ];
 
       workPackages = lib.optionals workSystem [
         ansible
-        virt-manager
       ];
 
       plasmaPackages = lib.optionals (currentSystemDe == "plasma") [
@@ -130,6 +122,7 @@
       niriPackages = lib.optionals (currentSystemDe == "niri") [
         gnome-keyring
         loupe
+        nautilus
         papers
 
         inputs.noctalia.packages.${hostSystem}.default

secrets/bomba.sops.yaml

@@ -10,9 +10,10 @@ prowlarr_api_key: ENC[AES256_GCM,data:UDpnqIP64k8Qt9k/sjbESNostFiGHfLo3CEYfyWppH
 seerr_api_key: ENC[AES256_GCM,data:KDQxxo2W4tz9UokscAUSz7pf7wY2AfsEQpZh2aXGjsQOBgSLt1DEe5LUxealBZju8gabhp4sNGFvp0+ioZpfkg==,iv:V/rbR6bZtVnDhLLVmygGyTf5Ujm8sb2xHy4JuvLiiV8=,tag:MxGzXHbZWgu3H+ICS2tSNQ==,type:str]
 indexers_ilcorsaroblu_password: ENC[AES256_GCM,data:w3CIGQqLxHEkUHvscZc=,iv:fjsB3zt4Z43MKRECjpa7+gNDzM8D+JK0sbKt2P+Hdiw=,tag:KvLawon+KfrhGmi1TWRHLw==,type:str]
 gitea_registration_token: ENC[AES256_GCM,data:aHoUBwPXtlme9RgGObwWt1V90JU5qeVBUtpINrb1hY6XjKi4+kLxAg==,iv:zkgDdx82Lku7/oNIoSoKUIrxvZuyPaGUI411V/rkW9c=,tag:0eBC0Kd71UwokH9scs/AKA==,type:str]
+mail_password: ENC[AES256_GCM,data:fznlr+Mzu+cpHsLN8EYx6g==,iv:s/DidEGNar4jGHGcbXsysZ2grpwVO1T2Zd+jksb90T8=,tag:LgJ7r+stG7QCpX9n/UZUsA==,type:str]
 navidrome_env: ENC[AES256_GCM,data:SjEg735zoiWNjp0+uYi5CyLadDd7mSXpG1LInLsaqESz0LNgMi+r46ohPjpEC3GD+WbE9D3XRwhB22oIey3K7p3GdB/bYjIR6wOa8MVjj3EDvzdBWbnhkXsGnIhLGuyZwDmMdA==,iv:gHv7lZzU09V3XVjs3nEOEm55xRwD23+sVWfgbuX18p4=,tag:8UAMIGXPGobQfBAao2nI6Q==,type:str]
 yamtrack_env: ENC[AES256_GCM,data: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,iv:rHGqUoLl6iJ1+LDHSuDFuIsl/YLlb75lUwl8gaxV79c=,tag:GVet48AfHBX5IXa/u1wXFA==,type:str]
-authentik_env: ENC[AES256_GCM,data:kAva3C4pWZ4+BFhGbbq9j1rSXeldb+NAwU16aZUD7wiw8k7Sg0kVq/43rj1HtR2ZTQY6DxhPlsK5I7opVAg953GwN0kTErpuhKLRWaRGSb8rC8kkxnY=,iv:X61qSjH18KQRWNOtYq1o8IZmY6Dz4TrJzehJWxE7b2o=,tag:mifmD1C3A+XSQveLviLt2w==,type:str]
+authentik_env: ENC[AES256_GCM,data:oKFapxTXYWIRoXvY0vGaQiS77uAkhyVv+QCo3B3uDrQuqPonUsqTY33Qo56vtWOJG7knX7SkvvKfIytJMjTgK63Gv+yON8M9cFlwKofD4Pxb9tJR1X2npvB6UQZd1UMrBB/H6rsMECU2zyOlDQjF4w5A2cL0hFpoX7TsS7IRv227rChJskVAU5Bdr8k1kXNRnEdEQOEf97vJ+zsBZltPFXmsDx1t3qzxgWywGCt0zoaqbbuBkSk4l33d/Cdbv5MFmPh56mqpIF/skljGpkI+zYDquUaaXVekfrpaMy/U3n8oVTnbjBsf6DBBlrSk3RGz5e00IoDa52H2T4NtsJX4G1oeTDQQSCKfKqMmmov7TG8g+2rEkstY5SZ15I1ulyDWyaeY1oNWO65JUA0nC9Q=,iv:9BLyfgPj9yUvQhjlvwQhxwGJFW1Qu33MkeDd/WKxmaY=,tag:iYNXjkP3lbaJsyPTD4O3wA==,type:str]
 vaultwarden_env: ENC[AES256_GCM,data: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,iv:ziOAFuLGSngOmS9cOr8LE+Qf0Wh6CSCmWNHWFahpMUk=,tag:Ssm/6hC6A3t90502qo4zng==,type:str]
 vikunja_env: ENC[AES256_GCM,data:dFh7Ev1HWL6AdjU3ZrWa7SzZicBRXdqUn53Mrguqh/EN/HrUHgk0pIa/SCM9kpt/xgEUkhDuxfMYWAXcJ8jX8yRgytN3ItF6aiivrV98lijGQR1rcAO7MR9T56Qp/FjXNEpleMJ6iv01JrpKTIFN47dC7Hal/AYrlXLqIyFG8uoje3b4xkTsNJeK+NfY4gNwddN454yNwADkJK+8QklM0Z73iGkVedPpOAi71JjsUIboJHGHUghxNIqalnTSZMs2jpI1HtPBAYdF/8WTwFGL7tAVwGUhctdQj+3LMuLBF5Z75ZDLJEbc16jf4ssfpnjAWQArb1oRsX5TCgceY7Qs5eso+hD1alWPVV0w/YygVTpWsSyBG0mN4Mm5r4mM7jW+B8y6aaQhtDb58laEZ1wDS1G+Fbnd/Y+ECJamKz8zi7xT0Qlh54hodFe4cXulOnt3/DQX8jPTttWawswBIq69k/j04T2oxpV33mR6MLrWvAU9vJKy+aYds0tbQS/j3DkeHtVo2Fsd6v5PHS/z8dP+vh1WYaFPg1NpYIQxr8ue0fB/S3Spme2EaiU9zdm6z0FYN1OJJlnQlt4YRbeUJMfCo+RoYkpR6VALtapKn40tXPiA22wCz5p3ErWblt0ZzOyWYkE3Q4d3DNhXUCbpnYw9WkS+GHYCXczfCc746+0tLpYTj3ncwtukblFjNY1glKJ7YV0v9fmDdm/zdfxrfZexTAeb8YSbKbCd5qxPyIzpwroLrwFleKmvBQ==,iv:y1XVaZV2Zt8d90CDoZXX5dAL3SBIZwTPNcopyGEr5SM=,tag:G+Yz18GWtyKRsXZsHWF5mg==,type:str]
 sops:
@@ -26,7 +27,7 @@ sops:
             ZQ17gIIOjhKHlGx8Lo5t/PekzFyQKCKdijS7caq74dVib1vO3tk+uQ==
             -----END AGE ENCRYPTED FILE-----
           recipient: age1ynu6zhhy84rr5xqce0flp25x5tnfgskesxfe39u7ewsk900fvagq9sq0lx
-    lastmodified: "2026-07-24T19:39:25Z"
+    lastmodified: "2026-08-17T14:37:39Z"
-    mac: ENC[AES256_GCM,data:Gs/dqDo+NRqAb8H+L2WHuBQYisC4NEJ/zEJPSOcA8pdpdjxAbJ/Pqq/yQ4WDc/59w7pu13dddA7JmDv7sSwAmfSHVNB7JRWhfVm7YG7L5/6vSi5NG3OgJeQYcLYYJzfDK3f1FJkMe9OKV02mSZ2531AdCJmEa4URjkgXZoY8QDY=,iv:WGRxhf0A6ddi39xNlkE3yB+PybrAkZP0N1ulzA/sWvY=,tag:kW3MyTLVNaQE0M5mndurTA==,type:str]
+    mac: ENC[AES256_GCM,data:EMQgOEPq0aeGUr9C7CzNxq2Yk++0rDp1AylfDKgmbMFonFotsj1MkFrtikm8r6EXNWuOf8u4lRy9HKtzAjg9BKHkf+rP/0x+vrfV82ubtxJnqYNYNNeEgpdFtMOU6Tv02ymX13tV9e+pvdUGtwUP57dMzCApQ9DACiMvOXQDhj4=,iv:PgGQcpSl2G2XApldBaqMnTgRGxWONARmkSZrfC041lU=,tag:63gTpOWHsyF1+1B2wlaDiA==,type:str]
     unencrypted_suffix: _unencrypted
-    version: 3.13.2
+    version: 3.13.3