feat: update to match stalwart, and add onion

flake.nix

@@ -7,16 +7,27 @@
     agenix.url = "github:ryantm/agenix";
     agenix.inputs.nixpkgs.follows = "nixpkgs";
   };
-  outputs = { self, nixpkgs, rust-overlay, flake-utils, agenix }:
-    (flake-utils.lib.eachDefaultSystem (system:
+  outputs =
+    {
+      self,
+      nixpkgs,
+      rust-overlay,
+      flake-utils,
+      agenix,
+    }:
+    (flake-utils.lib.eachDefaultSystem (
+      system:
       let
         overlays = [ (import rust-overlay) ];
         pkgs = import nixpkgs { inherit system overlays; };
-        rustToolchain = pkgs.rust-bin.selectLatestNightlyWith (toolchain:
+        agenixPkg = agenix.packages.${system}.default;
+        rustToolchain = pkgs.rust-bin.selectLatestNightlyWith (
+          toolchain:
           toolchain.default.override {
             extensions = [ "rust-src" ];
             targets = [ "wasm32-unknown-unknown" ];
-          });
+          }
+        );
 
         # Stage 1: Build the WASM crate (FOD — network allowed, output content-addressed)
         cgol-wasm = pkgs.stdenv.mkDerivation {
@@ -24,7 +35,12 @@
           version = "0.1.0";
           src = ./cgol;
 
-          nativeBuildInputs = [ rustToolchain pkgs.wasm-pack pkgs.binaryen pkgs.cacert ];
+          nativeBuildInputs = [
+            rustToolchain
+            pkgs.wasm-pack
+            pkgs.binaryen
+            pkgs.cacert
+          ];
 
           buildPhase = ''
             export HOME=$TMPDIR
@@ -83,12 +99,13 @@
           pname = "jetpham-qa-api";
           version = "0.1.0";
           src = ./api;
-          cargoHash = "sha256-/EgiCn5N3E1tCcBWI3Sm3NGQt2h8l8yPwi/ZjporiVs=";
+          cargoHash = "sha256-PL5D3NtPFZcDIxf8f2EOT7fahKVgt/+7obJIdR17AUY=";
           nativeBuildInputs = [ pkgs.pkg-config ];
           buildInputs = [ pkgs.openssl ];
         };
 
-      in {
+      in
+      {
         packages = {
           default = website;
           cgol-wasm = cgol-wasm;
@@ -96,12 +113,21 @@
         };
         devShells.default = pkgs.mkShell {
           buildInputs = with pkgs; [
-            nodejs git curl typescript-language-server
-            pkg-config wasm-pack binaryen rustToolchain
+            nodejs
+            git
+            curl
+            openssl
+            agenixPkg
+            typescript-language-server
+            pkg-config
+            wasm-pack
+            binaryen
+            rustToolchain
           ];
         };
       }
-    )) // {
+    ))
+    // {
       nixosModules.default = import ./module.nix self;
     };
 }