From a2f600d932e2182a2f8742bd1a588d635a55fbeb Mon Sep 17 00:00:00 2001
From: Jake Hillion <jake@hillion.co.uk>
Date: Sat, 21 Oct 2023 23:50:18 +0100
Subject: [PATCH] matrix: add registration shared secret for cli tool

---
 modules/services/matrix.nix                   |  8 +++++++
 .../registration_shared_secret.age            | 21 +++++++++++++++++++
 secrets/secrets.nix                           |  1 +
 3 files changed, 30 insertions(+)
 create mode 100644 secrets/matrix/matrix.hillion.co.uk/registration_shared_secret.age

diff --git a/modules/services/matrix.nix b/modules/services/matrix.nix
index 4da687d..3c24ac7 100644
--- a/modules/services/matrix.nix
+++ b/modules/services/matrix.nix
@@ -35,6 +35,12 @@ in
         owner = "matrix-synapse";
         group = "matrix-synapse";
       };
+
+      "matrix/matrix.hillion.co.uk/registration_shared_secret" = {
+        file = ../../secrets/matrix/matrix.hillion.co.uk/registration_shared_secret.age;
+        owner = "matrix-synapse";
+        group = "matrix-synapse";
+      };
     };
 
     services = {
@@ -58,6 +64,8 @@ in
         ];
 
         settings = {
+          registration_shared_secret_path = config.age.secrets."matrix/matrix.hillion.co.uk/registration_shared_secret".path;
+
           server_name = "hillion.co.uk";
           public_baseurl = "https://matrix.hillion.co.uk/";
           listeners = [
diff --git a/secrets/matrix/matrix.hillion.co.uk/registration_shared_secret.age b/secrets/matrix/matrix.hillion.co.uk/registration_shared_secret.age
new file mode 100644
index 0000000..ca03a74
--- /dev/null
+++ b/secrets/matrix/matrix.hillion.co.uk/registration_shared_secret.age
@@ -0,0 +1,21 @@
+age-encryption.org/v1
+-> ssh-rsa GxPFJQ
+go9Ut43nwGSKLx2cWSQuymgvlFyC43QxbV9NMP8Cs810fixcnvqzg3QWeK3iYvPZ
+TKL0+ZvdKYoGBatWc/dHflsNUSKef6rZ5Ip1VDCZIlkN2jYLaw5Z6fIKAthGBv55
+3VOEZGQ5g96OMeUnNPklTiRbukhVKoH1vtiyamzh7YIYYR/j/zyitEu1Ik+roQcf
+ngxMWpRKMvu7Za3Ujxga/z7d0JlVFCaJLK+taNvhJJ/EVb92KYpxHrR6AT3TLQK7
+9LXdHEYqrXRqDHCLEzoctKDSuv1urreQkG3CF2iXTsgGmy5uglh3bhVhYTmD0GD8
+BUzp8YNNGrVwDYcQvoR7VA
+-> ssh-rsa K9mW1w
+rg0YQVuDyzCf5FZay/JC8P6e+yrGO+d+TK9r153S29vhYsiJXA7PtbrEAe1raToy
+Zp5WTcBXm41vlcHvhYZRDAs1OgLjeyguj2gvaLzXbk6x4N2WzjzxysxjyfqrO/f4
+YYCK40my0kzeAh8iRvdDrceIPZJhu4LcPIyhgspsCKmHSdru2yR3P92/1slw7J/a
+I0SxGSs9Lt/Mq+Tx1wP5mc3LpaiMnFDSjMbpGTs/rnUllIcgQstNiWlQWbVNGQsP
+57aJn7TPn3CXFXj6lKERRz2O6MAtjT35p9svfGQZDh2XHodHqm6A2jFtZcltoOAB
+GklfPJNasTwa1s/GrxFqfw
+-> ssh-ed25519 O0LMHg x9UJVbJYJbEVk0gfS+moaBkFnqMZMJ8zzRrh6iSc6Q8
+8wEImXrzZQwVg2j6/LFziUOWlhjDkdDaRDY7++uZb5M
+-> tu-grease LYy! <i 8HLB3<V
+pt/Tgs27lfMyLJh1BN57Ce/Tf0ZuiftbuTuoacbCerzPu6Wn
+--- Bzf5px8E4eLToZ+vpN3xC0QOeGUzxQOpETr7Pmwpe9w
+|ºÅ�jç¥3¨sïÇo°?æ‚É•ÖJÓ©Oº4ÉäU±f$õ¢«PaËÍ·½Gð"ñÕåÙïa
\ No newline at end of file
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index cd83b28..d2e234c 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -60,6 +60,7 @@ in
   # Matrix Secrets
   "matrix/matrix.hillion.co.uk/macaroon_secret_key.age".publicKeys = jake_users ++ [ ts.strangervm.vm ];
   "matrix/matrix.hillion.co.uk/email.age".publicKeys = jake_users ++ [ ts.strangervm.vm ];
+  "matrix/matrix.hillion.co.uk/registration_shared_secret.age".publicKeys = jake_users ++ [ ts.strangervm.vm ];
 
   # Backups Secrets
   "restic/128G.age".publicKeys = jake_users ++ [ ts.storage.tywin ts.strangervm.vm ];
-- 
2.47.0