let
  chris-thelio = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDOiCjIMganzY45qiHFEO2NqkXz2mWsSEmq3zIoRJsiA root@nixos";
in {
  "fastmail_password.age".publicKeys = [chris-thelio];
  "fastmail_primary_address.age".publicKeys = [chris-thelio];
}

  isGPGenabled = true; # 😂 FIXME: config points to home-manager here, but need nixos's config?

        }
        else {}
      )
      // (
        if isGPGenabled
        then {
          GPG_TTY = "$(tty)";

  config,

  programs.sway = {

  config.programs.sway = {

  config.programs.gnupg.agent.enable = true;
  config.programs.gnupg.agent.pinentryFlavor = "curses";

  programs.gnupg.agent.enable = true;
  programs.gnupg.agent.pinentryFlavor = "curses";

  config.age.secrets.fastmail_password = {
    file = ../../../secrets/fastmail_password.age;
    group = "users";
    owner = "chris";
  };

  home-manager.users."chris" = {config, ...}: {

  config.home-manager.users."chris" = {...}: {
    _module.args = {inherit (config.age) secrets;};

      ../../email

    config.programs.git.extraConfig.commit.gpgsign = true;

    programs.git.extraConfig.commit.gpgsign = true;

  programs.gnupg.agent.enable = true;
  programs.gnupg.agent.pinentryFlavor = "curses";

    };
  }
    mbsync = {
      enable = true;
      create = "both";
      expunge = "both";
      remove = "both";
      extraConfig.account = {
        # NOTE microsoft office 365 imap servers may require this to be 1
        # because they do not support concurrent imap commands
        PipelineDepth = 50;
      };
    msmtp.enable = true;
    imap.host = imapHost;
    smtp.host = smtpHost;
    passwordCommand =
      if pkgs.stdenv.hostPlatform.isLinux
      then "${pkgs.gnome3.libsecret}/bin/secret-tool lookup email ${email}"
      else
        # TODO use config.home.username
        "security find-generic-password -a christophercummings -s ${email} -w";
in
  {
    email,
    realName,
    imapHost,
    smtpHost,
    gmail ? false,
  }: {
    inherit realName;
    flavor =
      if gmail
      then "gmail.com"
      else "plain";
    address = email;
    userName = email;
let
  pkgs = import <nixpkgs> {};

let
  template = import ./template.nix;
in
  (template "email@email.domain" "Real Name" "imap.email.domain" "smtp.email.domain")
  // {
    # you can pass extra params here if necessary. otherwise omit the `// { ... }`
    primary = true;
  }

{pkgs, ...}: let
  inherit (pkgs.stdenv.hostPlatform) isLinux;

{
  pkgs,
  secrets,
  ...
}: let
  primaryAddress = "chris@thesogu.com";

  home.packages = with pkgs;
    if isLinux
    then [libsecret mu]
    else [];

  home.packages = with pkgs; [mu];

        personal = [];
        icloud = [];

        "${primaryAddress}" = [];

  # TODO create systemd oneshot job to run `mbsync --all`
  # and mu init
  # and mu index
  # so new systems are auto-setup
  # without having to run those commands manually
  accounts.email.accounts = {
    "${primaryAddress}" = {
      address = primaryAddress;
      userName = primaryAddress;
      realName = "Chris Cummings";
      primary = true;
      mbsync = {
        enable = true;
        create = "both";
        expunge = "both";
        remove = "both";
        extraConfig.account.PipelineDepth = 50;
      };
      msmtp.enable = true;
      imap.host = "imap.fastmail.com";
      smtp.host = "smtp.fastmail.com";
      passwordCommand = "cat ${secrets.fastmail_password.path}";
    };
  };

(set-email-account! "personal"
                    '((mu4e-sent-folder . "/personal/Sent")
                      (mu4e-drafts-folder . "/personal/Drafts")
                      (mu4e-trash-folder . "/personal/Trash")
                      (mu4e-refile-folder . "/personal/Archive"))
                    t)
(set-email-account! "icloud"
                    '((mu4e-sent-folder . "/icloud/Sent Messages")
                      (mu4e-drafts-folder . "/icloud/Drafts")
                      (mu4e-trash-folder . "/icloud/Deleted Messages")
                      (mu4e-refile-folder . "/icloud/Archive"))
                    t)

(set-email-account! "sure"
                    '((mu4e-sent-folder . "/sure/[Gmail]/Sent Mail")
                      (mu4e-drafts-folder . "/sure/[Gmail]/Drafts")
                      (mu4e-trash-folder . "/sure/[Gmail]/Trash")
                      (mu4e-refile-folder . "/sure/[Gmail]/All Mail"))

(set-email-account! "chris@thesogu.com"
                    '((mu4e-sent-folder . "/chris@thesogu.com/Sent")
                      (mu4e-drafts-folder . "/chris@thesogu.com/Drafts")
                      (mu4e-trash-folder . "/chris@thesogu.com/Trash")
                      (mu4e-refile-folder . "/chris@thesogu.com/Archive"))

    extraPackages = [emacs-all-the-icons-fonts pkgs.mu];

    extraPackages = [emacs-all-the-icons-fonts mu];

  config.services.lorri.enable = isLinux;

  config.services.emacs.defaultEditor = true;

    };
    agenix = {
      url = "github:ryantm/agenix";
      inputs.nixpkgs.follows = "nixpkgs";

    agenix,

      specialArgs = {inherit inputs overlays;};

      specialArgs = {
        inherit inputs overlays;
      };

        agenix.nixosModule

        agenix.nixosModule

    "agenix": {
      "inputs": {
        "nixpkgs": [
          "nixpkgs"
        ]
      },
      "locked": {
        "lastModified": 1652712410,
        "narHash": "sha256-hMJ2TqLt0DleEnQFGUHK9sV2aAzJPU8pZeiZoqRozbE=",
        "owner": "ryantm",
        "repo": "agenix",
        "rev": "7e5e58b98c3dcbf497543ff6f22591552ebfe65b",
        "type": "github"
      },
      "original": {
        "owner": "ryantm",
        "repo": "agenix",
        "type": "github"
      }
    },

        "agenix": "agenix",