matrix: add matterbridge

hosts/matrix/default.nix

@@ -61,6 +61,11 @@
       };
     };
 
+    matterbridge = {
+      enable = true;
+      configPath = config.sops.secrets."matterbridge/config".path;
+    };
+
     nginx = {
       enable = true;
       virtualHosts."matrix.c3d2.de" = {
@@ -96,6 +101,7 @@
   sops = {
     defaultSopsFile = ./secrets.yaml;
     secrets = with libS.sops; {
+      "matterbridge/config" = permissionForUser "matterbridge";
       "matrix-synapse/config" = permissionForUser "matrix-synapse";
       "matrix-synapse/ldapSearchUserPassword" = permissionForUser "matrix-synapse";
     };

hosts/matrix/secrets.yaml

@@ -1,3 +1,7 @@
+matterbridge:
+    config: ENC[AES256_GCM,data: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,iv:nq707/d1LA1Sa7Llq2fgQ8L4a9CBZSofExy/tDLDqxY=,tag:uMCJ9gOrTnaum0GbsDSHBw==,type:str]
+    bot:
+        password: ENC[AES256_GCM,data:X60q4gpmcaKVtxrenIlF+rbLlgA3H3vqZwmpBfH8eTs=,iv:ZNUCfP1PyXMSANqmcmYVHa/MQuc7vj+M+qtymSs0bLg=,tag:n6YZGKPsNniYyciq3ZyW5Q==,type:str]
 matrix-synapse:
     ldapSearchUserPassword: ENC[AES256_GCM,data:pUXq4iuERa4KWcZY60cFkQngGX58BO7xZa1QX76SKv0=,iv:5fFJGIWrl2G5Im6F5wJM9ks5oLDS8nlXtV5hdvcVaUo=,tag:V8SncfUrJZ9HWtuD+uEdVg==,type:str]
     config: ENC[AES256_GCM,data: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,iv:sb9e8avH/B1guuSiWMp3oTcuEiQMzkkAHGEPMysc7L0=,tag:eHDTwPEdiepYYkpvVfjL5Q==,type:str]
@@ -25,8 +29,8 @@ sops:
             c1JVckphR2hmUmJUenZHdU9uQXJEcWsKPij9wBMFTEp8tg+co8Q/BT6XZbfNmkD/
             6uIkL5boV/HDBxJY/Xm1P5HhJKSPbi0wGAq0RCfisXkO9SgJKM5dBg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-03-24T00:18:24Z"
-    mac: ENC[AES256_GCM,data:kQu8EdfBdz2Xq0j9O8hGvP9idzGut4abeDmZ2+Tr0wXQh3ZDtST6GK2i9j+tCLGMc3zpg04F45dpB8SURsaknQgT+Rv1PajavUOpcPIMvarmMnxjhNhblpJUwsazX78xPxjVMM84S8mdyROzF8gdCA2GfqeNAGThxglperljtq0=,iv:sHysrP8uIIcjQnQRu/SP9OqT7i2bupE3gGZ0E4nYEtw=,tag:3K3/Xm0ZxqcoY+JXt5DQXQ==,type:str]
+    lastmodified: "2023-04-09T19:06:29Z"
+    mac: ENC[AES256_GCM,data:l7Jlt7HmIUK1wx2asetASv/iG/YQSkq07wkis/k3DriS6rnj6lS7KoHE/DbnT0KweP0t2Egr3/eCK+mO5rp/n8XODgXi3CSknQ78VSHybtOsUEh8WjQlYanfVsob+eBQi0fiHuo/UgiSd+BzSzHrSTf6gWfePJNN035IfkRF03w=,iv:fps2/71XTFfrv3MzldOcG32cyDgI3rFh6v9cBwwDXV4=,tag:uHgMx0ZxvAnPo16cdL+ecg==,type:str]
     pgp:
         - created_at: "2023-03-23T23:23:59Z"
           enc: |