From 908c48be89df1b7b577fabb6099c9de2aee030c0 Mon Sep 17 00:00:00 2001
From: h7x4 <h7x4@nani.wtf>
Date: Thu, 28 Nov 2024 23:49:50 +0100
Subject: [PATCH] tsuki/matrix: remove usage of `secrets` module

---
 hosts/tsuki/services/matrix/default.nix | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/hosts/tsuki/services/matrix/default.nix b/hosts/tsuki/services/matrix/default.nix
index 01b32ce..7d70655 100644
--- a/hosts/tsuki/services/matrix/default.nix
+++ b/hosts/tsuki/services/matrix/default.nix
@@ -1,5 +1,4 @@
-{ pkgs, lib, config, secrets, ... }: {
-
+{ pkgs, lib, config, ... }: {
   imports = [
     ./bridges/matrix-appservice-irc.nix
 
@@ -9,6 +8,12 @@
     ./coturn.nix
   ];
 
+  sops.secrets."matrix_synapse/registration_secret" = {
+    owner = "matrix-synapse";
+    group = "matrix-synapse";
+    mode = "0440";
+  };
+
   services.matrix-synapse-next = {
     enable = true;
     enableNginx = true;
@@ -58,7 +63,7 @@
       # with the registration shared secret
       enable_registration = false;
 
-      registration_shared_secret = secrets.keys.matrix.registration-shared-secret;
+      registration_shared_secret_path = config.sops.secrets."matrix_synapse/registration_secret".path;
       allow_public_rooms_over_federation = true;
 
       # password_config.enabled = lib.mkForce false;