feat: add sasl external certs for irssi

Signed-off-by: Lander Van den Bulcke <landervandenbulcke@gmail.com>

home/lander/features/workstation/irssi.nix

@@ -1,4 +1,4 @@
-{ ... }:
+{ config, ... }:
 {
   programs.irssi = {
     enable = true;
@@ -8,7 +8,10 @@
           address = "irc.libera.chat";
           port = 6697;
           autoConnect = true;
-          ssl.enable = true;
+          ssl = {
+            enable = true;
+            certificateFile = config.sops.secrets."libera.pem".path;
+          };
         };
         nick = "escapeangle";
         channels = {
@@ -23,7 +26,10 @@
           address = "irc.hackint.org";
           port = 6697;
           autoConnect = true;
-          ssl.enable = true;
+          ssl = {
+            enable = true;
+            certificateFile = config.sops.secrets."libera.pem".path;
+          };
         };
         nick = "escapeangle";
       };

home/lander/global/secrets.nix

@@ -1,7 +1,13 @@
 { ... }:
 
 {
-  sops.secrets.escapeangle-mail-pass = {
-    sopsFile = ./secrets.yaml;
+  sops = {
+    defaultSopsFile = ./secrets.yaml;
+
+    secrets = {
+      escapeangle-mail-pass = { };
+      "libera.pem" = { };
+      "hackint.pem" = { };
+    };
   };
 }

home/lander/global/secrets.yaml

@@ -1,4 +1,6 @@
 escapeangle-mail-pass: ENC[AES256_GCM,data:Uc/CiZCjSjIkph8=,iv:A0miPxk/3JeE6QbDHobKC+ZmuhnFatG9kua/+8yirtw=,tag:lOlpriBtNUKd09m2EdTc6w==,type:str]
+libera.pem: ENC[AES256_GCM,data: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,iv:VOV7vER+72+xl++K5NuegsTYoPLEgGsDZjA/smiKMGk=,tag:IRkg+2dF4y92gJRw81KQrg==,type:str]
+hackint.pem: ENC[AES256_GCM,data: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,iv:hvFMW4EKAVmofC9PbwsURBWVAm7YWVBI8WUJbory2Jo=,tag:3wCEsavoR3nwU1iiSLQsQA==,type:str]
 sops:
     age:
         - recipient: age15m0pdv8mkt4aue8wjay9k4endyymtka5je3gc2t63dgamfzh9vts7774hh
@@ -19,8 +21,8 @@ sops:
             SVJPeW1XM0RPWWI5L0wzSmFmNWRnZ3MKKbpkILPQB7dpzZQcU45g/4SfCdo8+UJK
             7hrCYeiae9zHu2CfrZqVMkCnAOpda8lL0INLNnrS9hDRNdk3LBLapQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-11-03T14:53:29Z"
-    mac: ENC[AES256_GCM,data:DXCtjC8hOyMR01xAxJLkhkTCdcMOeV0dFGmlZUaliNVIGtKDXaFvDanpb8IM1vRPcoNjRDDDgbC+KP6TPyKMEDpIigqQVNsjyD6jqEn0T0iHBiomWrsNXofY8NzIfeKT2075tt2s4BIbocaJlXLueiqAZoLHyh2FM9kEsU/jiuw=,iv:wpXl6yMJzNB28+d8MBb7I3Qx40sdTzykn4lzVtCW7Vo=,tag:Yq5wHEPbFnPM9bYXbDrL7Q==,type:str]
+    lastmodified: "2025-11-04T23:10:37Z"
+    mac: ENC[AES256_GCM,data:P9PVtwhqwKO/cf/bP1C9PxVjRL/cAmckLGdWR4ZbyUKXcJxI1mZt3KNvZKdeo7zFRLVbS8TK/xiQDDbKapx7Pj73niiQlv+/Wfq9x5A0qczHNA9R63hC/SvK2V+llFE5ANShFqHHV6lVhL/CEy98PVLkFleFc2UMdiBQnibj8UE=,iv:jdMBIqe8y8nXce2YyPdWAThDorUxL3HDcUqfAwDwRQg=,tag:w7/sPqpOF6ePygIV1B5Aqg==,type:str]
     pgp:
         - created_at: "2025-09-18T08:29:55Z"
           enc: |-