modules/services/matrix.nix

@@ -35,6 +35,12 @@ in
         owner = "matrix-synapse";
         group = "matrix-synapse";
       };
+
+      "matrix/matrix.hillion.co.uk/registration_shared_secret" = {
+        file = ../../secrets/matrix/matrix.hillion.co.uk/registration_shared_secret.age;
+        owner = "matrix-synapse";
+        group = "matrix-synapse";
+      };
     };
 
     services = {
@@ -58,6 +64,8 @@ in
         ];
 
         settings = {
+          registration_shared_secret_path = config.age.secrets."matrix/matrix.hillion.co.uk/registration_shared_secret".path;
+
           server_name = "hillion.co.uk";
           public_baseurl = "https://matrix.hillion.co.uk/";
           listeners = [

secrets/matrix/matrix.hillion.co.uk/registration_shared_secret.age

@@ -0,0 +1,21 @@
+age-encryption.org/v1
+-> ssh-rsa GxPFJQ
+go9Ut43nwGSKLx2cWSQuymgvlFyC43QxbV9NMP8Cs810fixcnvqzg3QWeK3iYvPZ
+TKL0+ZvdKYoGBatWc/dHflsNUSKef6rZ5Ip1VDCZIlkN2jYLaw5Z6fIKAthGBv55
+3VOEZGQ5g96OMeUnNPklTiRbukhVKoH1vtiyamzh7YIYYR/j/zyitEu1Ik+roQcf
+ngxMWpRKMvu7Za3Ujxga/z7d0JlVFCaJLK+taNvhJJ/EVb92KYpxHrR6AT3TLQK7
+9LXdHEYqrXRqDHCLEzoctKDSuv1urreQkG3CF2iXTsgGmy5uglh3bhVhYTmD0GD8
+BUzp8YNNGrVwDYcQvoR7VA
+-> ssh-rsa K9mW1w
+rg0YQVuDyzCf5FZay/JC8P6e+yrGO+d+TK9r153S29vhYsiJXA7PtbrEAe1raToy
+Zp5WTcBXm41vlcHvhYZRDAs1OgLjeyguj2gvaLzXbk6x4N2WzjzxysxjyfqrO/f4
+YYCK40my0kzeAh8iRvdDrceIPZJhu4LcPIyhgspsCKmHSdru2yR3P92/1slw7J/a
+I0SxGSs9Lt/Mq+Tx1wP5mc3LpaiMnFDSjMbpGTs/rnUllIcgQstNiWlQWbVNGQsP
+57aJn7TPn3CXFXj6lKERRz2O6MAtjT35p9svfGQZDh2XHodHqm6A2jFtZcltoOAB
+GklfPJNasTwa1s/GrxFqfw
+-> ssh-ed25519 O0LMHg x9UJVbJYJbEVk0gfS+moaBkFnqMZMJ8zzRrh6iSc6Q8
+8wEImXrzZQwVg2j6/LFziUOWlhjDkdDaRDY7++uZb5M
+-> tu-grease LYy! <i 8HLB3<V
+pt/Tgs27lfMyLJh1BN57Ce/Tf0ZuiftbuTuoacbCerzPu6Wn
+--- Bzf5px8E4eLToZ+vpN3xC0QOeGUzxQOpETr7Pmwpe9w
+|ºÅ<C2BA>jç¥3¨sïÇo°?æ‚É•ÖJÓ©Oº4ÉäU±f$õ¢«PaËÍ·½Gð"ñÕåÙïa

secrets/secrets.nix

@@ -60,6 +60,7 @@ in
   # Matrix Secrets
   "matrix/matrix.hillion.co.uk/macaroon_secret_key.age".publicKeys = jake_users ++ [ ts.strangervm.vm ];
   "matrix/matrix.hillion.co.uk/email.age".publicKeys = jake_users ++ [ ts.strangervm.vm ];
+  "matrix/matrix.hillion.co.uk/registration_shared_secret.age".publicKeys = jake_users ++ [ ts.strangervm.vm ];
 
   # Backups Secrets
   "restic/128G.age".publicKeys = jake_users ++ [ ts.storage.tywin ts.strangervm.vm ];