feat: matrix registration

hosts/hitsugibune/matrix.nix

@@ -10,6 +10,12 @@ let
     return 200 '${builtins.toJSON data}';
   '';
 in {
+  age.secrets.matrix = {
+    file = ../../secrets/matrix.age;
+    owner = "matrix-synapse";
+    group = "matrix-synapse";
+  };
+
   networking.domain = "sprechtl.me";
   networking.firewall.allowedTCPPorts = [ 80 443 ];
 
@@ -69,6 +75,7 @@ in {
     # from the value of `fqdn` above, you will likely run into some mismatched domain names
     # in client applications.
     settings.public_baseurl = baseUrl;
+    settings.enable_registration = true;
     settings.listeners = [
       { port = 8008;
         bind_addresses = [ "::1" ];
@@ -81,5 +88,6 @@ in {
         } ];
       }
     ];
+    extraConfigFiles = [ config.age.secrets.matrix.path ];
   };
 }

secrets/matrix.age

@@ -0,0 +1,16 @@
+age-encryption.org/v1
+-> ssh-ed25519 7PLkJg WDFC+mhq1R/cg+akT6cLXXs9MHP5gJECaD8nXh/nISQ
+eC80R+CqNYVXaTcwi+20DXf+u8oR5GDpjvbvOHxzRbY
+-> ssh-rsa LgF3EQ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+--- Uwzih4YPNY9s+j12ZEl5PL9jGoK9kt00f/UqW594mV4
+ﾇ詳u$ｳ､X8<58>ﾂ<>M
+X<EFBFBD>ﾌ第<16>ﾍ梏｡圧%I<0E>`ｿﾘ於ｫ･Ws｣)[Q0ﾜ"壗x0Lｶ湜#瞼它ｴG矢秀恫W<E681AB>)崑ﾗｱ､ｨt鞫疲ﾃm
５
vﾍｵｸK ｿ<>Oﾛo["Sﾎ【η2嵎

secrets/secrets.nix

@@ -6,4 +6,5 @@ in {
   "nextcloud.age".publicKeys = [hitsugibune key];
   "onlyoffice.age".publicKeys = [hitsugibune key];
   "speedtest-tracker.age".publicKeys = [saberofxebec key];
+  "matrix.age".publicKeys = [hitsugibune key];
 }