🔒️ registration shared secret for matrix

modules/matrix/default.nix

@@ -22,7 +22,6 @@
       enable_registration = false;
       database_type = "psycopg2";
       database_args = { database = "matrix"; };
-
       listeners = [{
         port = 8008;
         type = "http";
@@ -33,6 +32,9 @@
           names = [ "client" "federation" ];
         }];
       }];
+      extraConfigFiles = [
+        config.sops.secrets.matrix_registration_secret.path
+      ];
 
       account_threepid_delegates = {
         email = "https://vector.im";
@@ -40,4 +42,8 @@
       };
     };
   };
+
+  sops.secrets.matrix_registration_secret = { 
+    owner = "matrix-synapse";
+  };
 }

modules/sops/default.nix

@@ -0,0 +1,9 @@
+{ config, lib, pkgs, ... }:
+
+let
+  sources = import ../../nix/sources.nix;
+in
+{
+  imports = [ "${sources.sops-nix}/modules/sops" ];
+  sops.defaultSopsFile = ../../secrets/secrets.yaml;
+}