nixos/gitea: handle secrets for email.incoming (#545930)

nixos/modules/services/misc/gitea.nix

@@ -369,6 +369,13 @@ in
         description = "Path to a file containing the SMTP password.";
       };
 
+      incomingMailPasswordFile = mkOption {
+        type = types.nullOr types.str;
+        default = null;
+        example = "/var/lib/secrets/gitea/incomingmailpw";
+        description = "Path to a file containing the IMAP password.";
+      };
+
       metricsTokenFile = mkOption {
         type = types.nullOr types.str;
         default = null;
@@ -698,6 +705,10 @@ in
           PASSWD = "#mailerpass#";
         };
 
+        "email.incoming" = mkIf (cfg.incomingMailPasswordFile != null) {
+          PASSWORD = "#incomingmailpass#";
+        };
+
         metrics = mkIf (cfg.metricsTokenFile != null) {
           TOKEN = "#metricstoken#";
         };
@@ -858,6 +869,10 @@ in
               ${replaceSecretBin} '#mailerpass#' '${cfg.mailerPasswordFile}' '${runConfig}'
             ''}
 
+            ${lib.optionalString (cfg.incomingMailPasswordFile != null) ''
+              ${replaceSecretBin} '#incomingmailpass#' '${cfg.incomingMailPasswordFile}' '${runConfig}'
+            ''}
+
             ${lib.optionalString (cfg.metricsTokenFile != null) ''
               ${replaceSecretBin} '#metricstoken#' '${cfg.metricsTokenFile}' '${runConfig}'
             ''}