env/users: implement mail client certificates

1 files changed, 19 insertions, 2 deletions

diff --git a/env/users/default.nix b/env/users/default.nix
index 3602630..0e77e0d 100644
--- a/env/users/default.nix
+++ b/env/users/default.nix
@@ -8,7 +8,19 @@ in
     ./mailbox.nix
   ];
 
-  options.local = with types; {
+  options.local = with types; let
+    mailOption = mkOption {
+      default = { };
+
+      type = submodule {
+        options.certs = mkOption {
+          type = listOf str;
+          default = [ ];
+        };
+      };
+    };
+  in
+  {
     sysadmin = mkOption {
       type = str;
     };
@@ -50,6 +62,8 @@ in
             type = listOf str;
             default = [ ];
           };
+
+          mail = mailOption;
         };
 
         config.groups = mkBefore (optional config.sysadmin "wheel");
@@ -83,8 +97,11 @@ in
           };
 
           users = mkOption {
-            type = attrsOf (submodule { });
             default = { };
+
+            type = attrsOf (submodule {
+              options.mail = mailOption;
+            });
           };
         };