From 348115d432bf8216b73ddb643cc402fa1191c177 Mon Sep 17 00:00:00 2001 From: sefidel Date: Sat, 17 Feb 2024 07:23:37 +0900 Subject: feat(systems/cobalt): provide secrets for matrix-appservice-discord --- systems/cobalt/default.nix | 6 +++++- systems/cobalt/secrets/secrets.yaml | 5 +++-- 2 files changed, 8 insertions(+), 3 deletions(-) (limited to 'systems') diff --git a/systems/cobalt/default.nix b/systems/cobalt/default.nix index 4a99ebf..a877064 100644 --- a/systems/cobalt/default.nix +++ b/systems/cobalt/default.nix @@ -149,6 +149,7 @@ in sops.secrets.sliding-sync-secret = { }; sops.secrets.mjolnir-password = { owner = "mjolnir"; }; sops.secrets.mautrix-envs = { }; + sops.secrets.matrix-appservice-discord-envs = { }; sops.secrets.turn-secret = { }; # sops.secrets.openldap-admin-key = { # owner = "openldap"; @@ -295,7 +296,10 @@ in services.matrix-bridge = { enable = true; domain = config.modules.services.matrix-homeserver.domain; - secrets.mautrix-envs = config.sops.secrets.mautrix-envs.path; + secrets = { + mautrix-envs = config.sops.secrets.mautrix-envs.path; + matrix-appservice-discord-envs = config.sops.secrets.matrix-appservice-discord-envs.path; + }; }; # TODO: replace all URLs to be relative to the core homeserver service services.element-web = { diff --git a/systems/cobalt/secrets/secrets.yaml b/systems/cobalt/secrets/secrets.yaml index b4fe842..0b8acf0 100644 --- a/systems/cobalt/secrets/secrets.yaml +++ b/systems/cobalt/secrets/secrets.yaml @@ -11,6 +11,7 @@ mjolnir-password: ENC[AES256_GCM,data:dyM2VVxn1PFRXy5dgfvq3EuWyGDhDZvJOd1sTnKE5q mjolnir-security-key: ENC[AES256_GCM,data:zMe0xkcjzOjbh6wv2QP3gESTSU8Y/UXyG3GBr+kV9J/3d7YnHcNc/Cz5+QbceYfb3vWOlVHOMNjdzC8=,iv:A0zOBRJH7U/geVtl1FSLemJ5eadnP//YvcGRXqoI3Sk=,tag:buCUIJo8plRdmb3NCKohjQ==,type:str] #ENC[AES256_GCM,data:Qp2qzobiQ1q5JQboo9fRG/HUhyqoYEF4EmBd/DFt46Y9i4dCU+kbEHnqGOvb6zdOgAcIo1L/8Z4ZutGiRnvkJFnrbA6r/bf3LJOilLsVbg==,iv:TCj3cjZcLhHNVv6fDwx092D2YHRwIwaRj1Vuw56BYQs=,tag:gMAkM++w92fFwRrMv5AGLA==,type:comment] mautrix-envs: ENC[AES256_GCM,data:LtTGvxX4F+mi8JGyrvJ4sTGiDEFhDCnHS9tM78KN8QLsSiMPmp1MR/7e/uVR4qljWhZTq3u6F01xh5V13kf3cFLuSveae1fRGCArbsJXwj25N5pPGJA40COY7B/Ir90kR1eOJfHP9r9n7nCZbDsCvck4F2JSWpI+uxUY/FGATssPiqi311+uKaSTO7kBuzFrlMBLHwRgGQWKROnEXLz35xv8eP/zjZP2XQL8LK6PGIp0xPLDkOhWCWEzKWX1iSPU/rp4EN46+LpTVIO8pYA62+z7eoZnSdviF4kk3pQscNuh+Dqb0grqqzwOwOWpz+K+q7EXGZ5206QJwcPyp1kFcye89IWr7MhCCDS7sYi7p48oq9aqDieYNi1sJsy87zpgigaDXOuPnqgunpXlAi1Tfq7TNOnno5Kjhfiv9trJ4TUdiMGGYVYYWkBJMyR81vyZsv0PGIqGKSIRd63M7/e0dKHp+arfhEnDiKdWkHD/n6EFU4fkceJR1OXHjLbrxUkN9IPJIRzI8kyYhMv+zBQmUelZyZoxkCcVvVTz0ClWmo/0mEXtp3GMb5PWB7b+xQOwPNdnkEKAjaW/qcGij4KzpeW73vE9dqh77HmjEGoVPwtiXqHAr/1UqTFkDaURAPwB/rD4ZKdsuO4rNCCJcueRLUAu1y73Ym9LUA2DYEOi7TElQU7h4uBYP9sywnIBdPHAqtouuxaDPF+x+8DB+kpZa5rIhcQMLRfdFW7SAKkc5xMbf45muaF8nL3gD0p/TtQNxwZcmBEG3ryY5yrWCneUHznqYk+yrHwYDNf/90Tf7hWgfDcyl+2non4CSPQvUqW4YuDaoO/vkxy6fFm9pk34chsCC/tLgcmMx6X9U7JTCv1NzUtzIBRtRXMMoGU6G5JskNimWmZaEWd60JVaCOMfqXLj0dWZzEmPMajTrKJ5v0Hlu4LS0FWvozUoxFCxCihDlOEgDTYzXTr8G7kpshe6QOTLV9YjxDoXI7XNNkD/rzGI8ZT0yNKJll/JVZ+KD9nbJFej71wxG0fPOEruWpEkwSDsyLQi8I8SSg992ed23oB2kLGI2wpm+suNwwHtzFDXa3IEidtyGlRfVjdZtWxKrguWcL6iXWJD/x9XUmjlBTbfVs8LN6IYazVnK4/+5JVEu2N/6zERvHYjpCIQ2V3t04LTzcYAPdRQnaCT5oZTHjLHUoYBlySIaDGTkQcFKKzDrmwcvzXcOO2YPyWmW8YjPb0wbWBAXZ+1pTGE+F6kCTkk2DSiK7ltMp5Gg8ExeGoa/WxFqiHIasONkJP+dJ8DNc+wGChx5/y3pB8Q+INuBhClDiKZ06PnKBwTeg/xXwMKp7FvLzTt8rLg97W2lfuoIbT/lGe1fqcXyRxzz8qTDg4BOpMkjIAmGVGX6LfG2iVPpphVtIts1NRY7YmzELc8/rAwuE+OpktVg3xAcRg6/LxW8GosHGA85sxd7xzTfNQIDsx3BWLs07VviuaqmnazMxkjQdE9QUvatR0NJ0t1u5I1XoEYhzoXVZKUN0Ekfv6x81HimHFY8knvM/KHF67MZGrY+ToYU1eTxLdYh8B1w1CDg+ACYDR3oXFdRXUuk6I0oZr/k0T7LUTZxJcu/KfDEtTfudTTbTqrkR2GY5r+lagBIhC4U/ZFnFXnZ+K9+RtJ8AUHIdOQT0h7OLoW7RNIixf5Pw6zkiX43PtbVHKpW1ijVdRlHboDMHcaO0I2guOIjnvYEmL4WQ7NunbPdkpQIkVErFSezP3tg1wPbySutGHc9DKhxNh9vJQtnj+Jqr19rD9AQJxnJIhymEpOBy7IGxviALfGYnV8kCCF8w3OArZlGX7RViL9m/A26yCeOmU3AJ3/nXv+quFHDe7Qx5H0Xyyvr4MxMWAUzw6OZxFhAzRSCUbvk12qvK3LbBY6eidG96+Vf5hWM2Xw8H1/FWQkth//vggF9rPrEwvb5Tgy5KQM/gzwUCq6TbR+Fpk3rwBpxMocZd0qSDvUHXBy9355te/e0bnNEVPM3+NAHeXq0NqP9dx89BJoQQ0x6D6gButb4yH2T/yvnQwSeELPffW/7o6CW2AGYi5eChyU6b1XHIUGG7mx649OanhCGkyOs2hCA8KgqjHKwahMBQa3HgAxUa3jv1+kZFhoYMdxaykFAeIIDJr8+4bxwRkgik2JULgl,iv:1sve+pizjAp1CsGFoCjAvE/jJRH6SSUoXIkgwu/TsAM=,tag:nl00+myKsxjE+EUwD/xDuQ==,type:str] +matrix-appservice-discord-envs: ENC[AES256_GCM,data:Vf897e0GMk5Ti4duNfeCfVXU64IIv9LNQ7vgVZfdykVjjVLFRdnsm9af4hSvD9fDjIqf1+Vauqy9yV0+uW8PoU/hTwfNA6pqApcKXltJpHZuqM5UysOCj2PuN7OlhqTedJaztqOm9bGnavyGYqT9MDk4SGUzj6q5wBZziRZ1MEPtIQqSBUQtD11BCJXcqzGuUmzSEIemRdyyWTR+K1XAJysC,iv:hi+0KK0V7x8yEnavtLH8qtIkP4eCxFBXaHkYPmXZKUk=,tag:gxP1smIlZGHZNUsHAs9ebg==,type:str] double-puppet-as-token: ENC[AES256_GCM,data:q7zsHsm9JvKfQkLxLZb44cuUse3+JdJKjC1Z8erAVaNZjDNvBzqHZv6hgWLnRvjD5htCOZyDk0cAdg17/wNWsA==,iv:KTUJsLfit9vXuVD8ba2QyCS1v7dRgDfgnrE+1nkHL5c=,tag:keLyl4TS2RQ6li07JCn+7A==,type:str] double-puppet-hs-token: ENC[AES256_GCM,data:iHIjy5pcjgVJF39XXj6WCdFslRmkLRnrCs95mjzmzRHCPEgWbmTqlqBuQVGIOkKhcyTZtflpC1D0/NtoBlmtFg==,iv:iDLvhGBABbgGSH9Q/FfgSMcw0srwL1KX6P87zAjn70k=,tag:pmTecoXSMVsRPZ5OhaD5Jg==,type:str] dendrite-envs: ENC[AES256_GCM,data:67FnrGQUZWFfHAoUM/idTZlBX7aek3fbPkswB9+3pjLNQuXpIWYoa2vpdGt7zec2n9o9z0V3LdlkookjS95aPpZmKYwPaKkH2L7Jaxw=,iv:c4lEReLizcQeTTiG7cJwd+2sBH+EKBGycKeoDgJ/394=,tag:zBBxIcXn+8Q90BkPidltfQ==,type:str] @@ -47,8 +48,8 @@ sops: cUpBZ01CMEFjNnNuWjlYejVKajkwcGMKehqYCZP0zZHDTfJrC/5LYiE/3doa0OiM OKXhOuUX8HF8RfkyiOSMpntxuNX2jSvd9sQRYnHkUvgm793+IuQjrg== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-02-08T15:16:36Z" - mac: ENC[AES256_GCM,data:/xjl54RNulwzgo1zcSF7tEPegWUaJdUhxT8kORV4qs0JXg9UeY9LINqOSfWLKZCGSjiHVXYSeHU7fvQligum+1/VPt84DbeqHy7+aafmEcAvVKuARLe3+TaX0XTZEwSzMLlTOHJ+C1jf8vCTye3JpaTudmgdbTOKTncyTFDPOug=,iv:cTDpt5LlCn9LpCn8Z/Q5J67ocvqH5qc3AgP8xQ3ogtI=,tag:qEev3DVLY9m8ugabhdgk7A==,type:str] + lastmodified: "2024-02-16T21:36:26Z" + mac: ENC[AES256_GCM,data:ygl2FsfRgl/hfEujFEIT7K5e5oTWafr89wVApEmRwgOqYodHXRglsYu7ZkCrKHXbmHqwK+evuI5RhjwO8ASOcggB1PJexkQoUfCmaPFYBQNDoja21Kw3ImRi1ezYeUqoSAqZ2U349oVlj5du5aFGCa+bctoSNFpBh3CwTGYXih0=,iv:EYsDIZiM6Z/QLoVR5MzsH2PPUXqXnXPNQZP7wGU3tz8=,tag:Xeq3zwYyVlM2QVlFU4ipSw==,type:str] pgp: [] unencrypted_suffix: _unencrypted version: 3.8.1 -- cgit 1.4.1