Bump

system/nix/default.nix

@@ -31,7 +31,7 @@
     settings = {
       auto-optimise-store = true;
       builders-use-substitutes = true;
-      experimental-features = ["nix-command" "flakes"];
+      experimental-features = ["nix-command" "flakes" "repl-flake"];
       flake-registry = "/etc/nix/registry.json";
 
       # for direnv GC roots

system/server/mail.nix

@@ -2,7 +2,16 @@
   services.stalwart-mail = {
     enable = true;
     openFirewall = false; # Don't want to open port 8080, will leave that for caddy.
+    credentials = {
+      user_admin_password = config.age.secrets.mail-admin.path;
+    };
     settings = {
+      authentication = {
+        fallback-admin = {
+          secret = "%{file:/run/credentials/stalwart-mail.service/user_admin_password}%";
+          user = "admin";
+        };
+      };
       server = {
         tracer."log" = {
           ansi = false;
@@ -13,12 +22,6 @@
           rotate = "daily";
           type = "log";
         };
-        authentication = {
-          fallback-admin = {
-            secret = "%{file:${config.age.secrets.mail-admin.path}}%";
-            user = "admin";
-          };
-        };
         listener = {
           http = {
             bind = "127.0.0.1:9003";
@@ -33,11 +36,6 @@
             bind = "[::]:25";
             protocol = "smtp";
           };
-          jmap = {
-            bind = "[::]:9003";
-            url = "https://mail.jsw.tf";
-            protocol = "jmap";
-          };
           submissions = {
             bind = "[::]:465";
             protocol = "smtp";