lldap: automatic provision + system users + stalwart + whatever

machines/gerd/services/authelia/authelia.nix

@@ -81,6 +81,11 @@ in {
     };
   };
 
+  # setup lldap user for authelia that can send emails
+  services.lldap.provision.users = config.mine.shared.lib.ldap.mkScope (lconfig: llib: {
+    authelia = llib.mkProvisionUserSystem "authelia" config.age.secrets.authelia-smtp-password.path;
+  });
+
   services.nginx.virtualHosts."${svc_domain}" = {
     forceSSL = true;
     enableACME = true;