🔒️ registration shared secret for matrix

modules/matrix/default.nix

@@ -22,7 +22,6 @@
       enable_registration = false;
       database_type = "psycopg2";
       database_args = { database = "matrix"; };
-
       listeners = [{
         port = 8008;
         type = "http";
@@ -33,6 +32,9 @@
           names = [ "client" "federation" ];
         }];
       }];
+      extraConfigFiles = [
+        config.sops.secrets.matrix_registration_secret.path
+      ];
 
       account_threepid_delegates = {
         email = "https://vector.im";
@@ -40,4 +42,8 @@
       };
     };
   };
+
+  sops.secrets.matrix_registration_secret = { 
+    owner = "matrix-synapse";
+  };
 }