chg: Install the antispam bot

Author: shackra

flake.lock

@@ -13,6 +13,7 @@
     deploy-rs.url = "github:serokell/deploy-rs";
     flake-schemas.url = "https://flakehub.com/f/DeterminateSystems/flake-schemas/*";
     nixos-generators.url = "github:nix-community/nixos-generators";
+    antispam.url = "github:shackra/antispam";
 
     nixpkgs.url = "https://flakehub.com/f/NixOS/nixpkgs/*";
   };
@@ -26,7 +27,8 @@
       pre-commit-hooks,
       deploy-rs,
       sops-nix,
-      nixos-generators
+      nixos-generators,
+      antispam
     }:
     let
       # Helpers for producing system-specific outputs
@@ -134,6 +136,7 @@
         system = "x86_64-linux";
         modules = [
           sops-nix.nixosModules.sops
+	  antispam.nixosModules.default
           ./vps.nix
         ];
       };

flake.nix

@@ -17,6 +17,9 @@ wireguard:
 radicle:
     auth:
         privateKey: ENC[AES256_GCM,data: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,iv:EzK+uiDUtqAsPnWGN15Z0urXrFa2dVLLjML7OFaZGZc=,tag:DksqUQ5M56UEoFG02Fuo7A==,type:str]
+services:
+    antispam:
+        telegram_key: ENC[AES256_GCM,data:OyN0HJhrBw7TBTqUWfSW3gpZo82KVT6vfcwcIRIShK/B7M03e5vtyneIV3Ae2w==,iv:8inUMogShZ2R5OS8ildvgLhk6GfseF2fTzBjUCkadoU=,tag:oyX9cdsJzESewrWL18MA9w==,type:str]
 sops:
     age:
         - recipient: age1wv34sf9ymnqvr8utp3v7spvwxnxj66mdh7cup4h6x5ca2tkjesqqvl8sxe
@@ -37,7 +40,7 @@ sops:
             enR1U25vMk9WR0xEY0lDdEQrcm1xZm8K45oP/CRLlmKzVExDqpjUnRF69xjUGq22
             KMN+B+jDoUDca94GyiHt5AV+B9yt3E/X+ImBkynTkBUWeP/4k47beA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-04-01T19:00:30Z"
-    mac: ENC[AES256_GCM,data:la1NHZ9c+FCKh6jAZjKc6opfWfcosUAWYPkGDAL0YCTi5sHHQ8G9WDqNLB+meOed9iWjUt2VvaB0zH7iW74RlLyuS0wfyELUzrlI+qTTP8MjfbHLzadVXinq8btahIITRW9D/GEFQMmiE1e60YXK6L/mPQt6L+o+GGpDlv/R3jE=,iv:c6AH8GngUq/YHvOxGts9QypibZ0ma6R7D89ZktrDWY0=,tag:Zfcury9lWalSIGGuUzx9TQ==,type:str]
+    lastmodified: "2026-04-26T23:33:41Z"
+    mac: ENC[AES256_GCM,data:f7PY849SyVHgZ/agwvYB8QrHan1+ODd3pWW+Y71iWtBowzC98smcgcslAHhYRgGY4DckoGQlEpI2plrGUmm77oFkGH4jr6k7KM4DXDXwnK+RcZpnM4Gv+j17DkPEPFzcHiW/DFXSceNGj3HqTDXdbwU5n+hAUxB5sRP0Qe3R+Cs=,iv:zTirEAkHoVlPvnreE9YpPlcVRe6JYrjaTEVmZvkYrls=,tag:TrbkmQDE/FLGMNlqYoY0PA==,type:str]
     unencrypted_suffix: _unencrypted
-    version: 3.11.0
+    version: 3.12.1

secrets.yaml

@@ -40,11 +40,16 @@
     "wireguard/preshared_keys/pc" = { };
     "wireguard/preshared_keys/phone" = { };
     "radicle/auth/privateKey" = { };
+    "services/antispam/telegram_key" = { };
   };
   sops.templates."acme.conf".content = "DO_AUTH_TOKEN=${
     config.sops.placeholder."digitalocean/do_auth_token"
   }";
 
+  sops.templates."antispam".content = "TELEGRAM_BOT_KEY=${
+    config.sops.placeholder."services/antispam/telegram_key"
+  }";
+
   users = {
     mutableUsers = false;
     users = {
@@ -287,12 +292,12 @@
         ];
       };
       web = {
-	pinned = {
+        pinned = {
           repositories = [
             "rad:z39RJHSHs166S5kr8Qstj6kd1LFah" # Goimapnotify
-	    "rad:z3mUnND1ZXQaLhSAcf26SFmdJ6sCh" # liber-modestus
-	    "rad:z2yWgtRWDbdZqzJGEfWDi9NetLZ7o" # The Rule
-	    "rad:zecRiYjpjFnZWFhygfVM7shaCzJh"  # Backpack Emacs
+            "rad:z3mUnND1ZXQaLhSAcf26SFmdJ6sCh" # liber-modestus
+            "rad:z2yWgtRWDbdZqzJGEfWDi9NetLZ7o" # The Rule
+            "rad:zecRiYjpjFnZWFhygfVM7shaCzJh" # Backpack Emacs
           ];
         };
         bannerUrl = "https://misc.jorgearaya.dev/Flores%20de%20Navidad%20por%20Claude%20Monet.jpg";
@@ -305,5 +310,10 @@
     httpd.nginx.forceSSL = true;
   };
 
+  services.emacs-antispam-bot = {
+    enable = true;
+    tokenFile = config.sops.templates."antispam".path;
+  };
+
   system.stateVersion = "24.11";
 }