System Gen171 @ 2026-07-17-23:59:59 by jonas@monolith

hosts/harbor/configuration.nix

@@ -29,6 +29,18 @@
     owner = config.hive.gotify-instance.user;
     key = "adminPassword";
   };
+  sops.secrets.matrix-hs-secret = {
+    format = "binary";
+    sopsFile = ../../secrets/harbor/hs_ed25519_secret_key;
+  };
+  sops.secrets.hidden-matrix-hostname = {
+    sopsFile = ../../secrets/harbor/hidden-matrix.yaml;
+    key = "hostname";
+  };
+  sops.secrets.hidden-matrix-registration-secret = {
+    sopsFile = ../../secrets/harbor/hidden-matrix.yaml;
+    key = "registration_secret";
+  };
 
   # gc settings and binary caches
   nix = {
@@ -82,6 +94,10 @@
   hive.borg-server.repositories.comfy-station.ssh_public_key = builtins.readFile (../../static/keys + "/borg-jonas@comfy-station.pub");
   hive.wg.server.enable = true;
   hive.wg.server.privateKeyFile = config.sops.secrets.wg-priv.path;
+  hive.matrix.enable = true;
+  hive.matrix.hiddenServiceSecret = config.sops.secrets.matrix-hs-secret.path;
+  hive.matrix.hiddenServiceHostnameSopsKey = config.sops.secrets.hidden-matrix-hostname.name;
+  hive.matrix.registrationSecretSopsKey = config.sops.secrets.hidden-matrix-registration-secret.name;
 
   # This value determines the NixOS release from which the default
   # settings for stateful data, like file locations and database versions