feat(systems/cobalt): provide secrets for matrix-appservice-discord

2 files changed, 8 insertions, 3 deletions

diff --git a/systems/cobalt/default.nix b/systems/cobalt/default.nix
index 4a99ebf..a877064 100644
--- a/systems/cobalt/default.nix
+++ b/systems/cobalt/default.nix
@@ -149,6 +149,7 @@ in
   sops.secrets.sliding-sync-secret = { };
   sops.secrets.mjolnir-password = { owner = "mjolnir"; };
   sops.secrets.mautrix-envs = { };
+  sops.secrets.matrix-appservice-discord-envs = { };
   sops.secrets.turn-secret = { };
   # sops.secrets.openldap-admin-key = {
   # owner = "openldap";
@@ -295,7 +296,10 @@ in
     services.matrix-bridge = {
       enable = true;
       domain = config.modules.services.matrix-homeserver.domain;
-      secrets.mautrix-envs = config.sops.secrets.mautrix-envs.path;
+      secrets = {
+        mautrix-envs = config.sops.secrets.mautrix-envs.path;
+        matrix-appservice-discord-envs = config.sops.secrets.matrix-appservice-discord-envs.path;
+      };
     };
     # TODO: replace all URLs to be relative to the core homeserver service
     services.element-web = {
diff --git a/systems/cobalt/secrets/secrets.yaml b/systems/cobalt/secrets/secrets.yaml
index b4fe842..0b8acf0 100644
--- a/systems/cobalt/secrets/secrets.yaml
+++ b/systems/cobalt/secrets/secrets.yaml
@@ -11,6 +11,7 @@ mjolnir-password: ENC[AES256_GCM,data:dyM2VVxn1PFRXy5dgfvq3EuWyGDhDZvJOd1sTnKE5q
 mjolnir-security-key: ENC[AES256_GCM,data:zMe0xkcjzOjbh6wv2QP3gESTSU8Y/UXyG3GBr+kV9J/3d7YnHcNc/Cz5+QbceYfb3vWOlVHOMNjdzC8=,iv:A0zOBRJH7U/geVtl1FSLemJ5eadnP//YvcGRXqoI3Sk=,tag:buCUIJo8plRdmb3NCKohjQ==,type:str]
 #ENC[AES256_GCM,data:Qp2qzobiQ1q5JQboo9fRG/HUhyqoYEF4EmBd/DFt46Y9i4dCU+kbEHnqGOvb6zdOgAcIo1L/8Z4ZutGiRnvkJFnrbA6r/bf3LJOilLsVbg==,iv:TCj3cjZcLhHNVv6fDwx092D2YHRwIwaRj1Vuw56BYQs=,tag:gMAkM++w92fFwRrMv5AGLA==,type:comment]
 mautrix-envs: ENC[AES256_GCM,data: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,iv:1sve+pizjAp1CsGFoCjAvE/jJRH6SSUoXIkgwu/TsAM=,tag:nl00+myKsxjE+EUwD/xDuQ==,type:str]
+matrix-appservice-discord-envs: ENC[AES256_GCM,data:Vf897e0GMk5Ti4duNfeCfVXU64IIv9LNQ7vgVZfdykVjjVLFRdnsm9af4hSvD9fDjIqf1+Vauqy9yV0+uW8PoU/hTwfNA6pqApcKXltJpHZuqM5UysOCj2PuN7OlhqTedJaztqOm9bGnavyGYqT9MDk4SGUzj6q5wBZziRZ1MEPtIQqSBUQtD11BCJXcqzGuUmzSEIemRdyyWTR+K1XAJysC,iv:hi+0KK0V7x8yEnavtLH8qtIkP4eCxFBXaHkYPmXZKUk=,tag:gxP1smIlZGHZNUsHAs9ebg==,type:str]
 double-puppet-as-token: ENC[AES256_GCM,data:q7zsHsm9JvKfQkLxLZb44cuUse3+JdJKjC1Z8erAVaNZjDNvBzqHZv6hgWLnRvjD5htCOZyDk0cAdg17/wNWsA==,iv:KTUJsLfit9vXuVD8ba2QyCS1v7dRgDfgnrE+1nkHL5c=,tag:keLyl4TS2RQ6li07JCn+7A==,type:str]
 double-puppet-hs-token: ENC[AES256_GCM,data:iHIjy5pcjgVJF39XXj6WCdFslRmkLRnrCs95mjzmzRHCPEgWbmTqlqBuQVGIOkKhcyTZtflpC1D0/NtoBlmtFg==,iv:iDLvhGBABbgGSH9Q/FfgSMcw0srwL1KX6P87zAjn70k=,tag:pmTecoXSMVsRPZ5OhaD5Jg==,type:str]
 dendrite-envs: ENC[AES256_GCM,data:67FnrGQUZWFfHAoUM/idTZlBX7aek3fbPkswB9+3pjLNQuXpIWYoa2vpdGt7zec2n9o9z0V3LdlkookjS95aPpZmKYwPaKkH2L7Jaxw=,iv:c4lEReLizcQeTTiG7cJwd+2sBH+EKBGycKeoDgJ/394=,tag:zBBxIcXn+8Q90BkPidltfQ==,type:str]
@@ -47,8 +48,8 @@ sops:
             cUpBZ01CMEFjNnNuWjlYejVKajkwcGMKehqYCZP0zZHDTfJrC/5LYiE/3doa0OiM
             OKXhOuUX8HF8RfkyiOSMpntxuNX2jSvd9sQRYnHkUvgm793+IuQjrg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-02-08T15:16:36Z"
-    mac: ENC[AES256_GCM,data:/xjl54RNulwzgo1zcSF7tEPegWUaJdUhxT8kORV4qs0JXg9UeY9LINqOSfWLKZCGSjiHVXYSeHU7fvQligum+1/VPt84DbeqHy7+aafmEcAvVKuARLe3+TaX0XTZEwSzMLlTOHJ+C1jf8vCTye3JpaTudmgdbTOKTncyTFDPOug=,iv:cTDpt5LlCn9LpCn8Z/Q5J67ocvqH5qc3AgP8xQ3ogtI=,tag:qEev3DVLY9m8ugabhdgk7A==,type:str]
+    lastmodified: "2024-02-16T21:36:26Z"
+    mac: ENC[AES256_GCM,data:ygl2FsfRgl/hfEujFEIT7K5e5oTWafr89wVApEmRwgOqYodHXRglsYu7ZkCrKHXbmHqwK+evuI5RhjwO8ASOcggB1PJexkQoUfCmaPFYBQNDoja21Kw3ImRi1ezYeUqoSAqZ2U349oVlj5du5aFGCa+bctoSNFpBh3CwTGYXih0=,iv:EYsDIZiM6Z/QLoVR5MzsH2PPUXqXnXPNQZP7wGU3tz8=,tag:Xeq3zwYyVlM2QVlFU4ipSw==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.8.1