From fa78327922dcdaa72d3c987762708cdb15f2dcd8 Mon Sep 17 00:00:00 2001
From: Tom Hubrecht <tom@hubrecht.ovh>
Date: Fri, 8 Dec 2023 14:53:13 +0100
Subject: [PATCH] feat(web01): Install matterbridge

---
 machines/web01/_configuration.nix               |   1 +
 machines/web01/matterbridge.nix                 |  10 ++++++++++
 machines/web01/secrets/matterbridge-config_file | Bin 0 -> 1769 bytes
 machines/web01/secrets/secrets.nix              |   1 +
 4 files changed, 12 insertions(+)
 create mode 100644 machines/web01/matterbridge.nix
 create mode 100644 machines/web01/secrets/matterbridge-config_file

diff --git a/machines/web01/_configuration.nix b/machines/web01/_configuration.nix
index 977983e..bbd90a1 100644
--- a/machines/web01/_configuration.nix
+++ b/machines/web01/_configuration.nix
@@ -11,6 +11,7 @@ lib.extra.mkConfig {
     "castopod"
     "metis"
     "linkal"
+    "matterbridge"
     "ntfy-sh"
     "plausible"
     "wordpress"
diff --git a/machines/web01/matterbridge.nix b/machines/web01/matterbridge.nix
new file mode 100644
index 0000000..1e133d9
--- /dev/null
+++ b/machines/web01/matterbridge.nix
@@ -0,0 +1,10 @@
+{ config, ... }:
+
+{
+  services.matterbridge = {
+    enable = true;
+    configPath = config.age.secrets."matterbridge-config_file".path;
+  };
+
+  dgn-secrets.matches."^matterbridge-.*$" = { owner = "matterbridge"; };
+}
diff --git a/machines/web01/secrets/matterbridge-config_file b/machines/web01/secrets/matterbridge-config_file
new file mode 100644
index 0000000000000000000000000000000000000000..7ba4c5f124300931d04728fec032607596d812eb
GIT binary patch
literal 1769
zcmZY8|I^ci9S3ly$2R(K$BEMiw;L2>$L-0UCrR5h&Gd1Xq-~nCO`Cp6({hUW(xhpd
zG)>yH%{@5w$oaVOfGFO1pbq3@K7eqZ@*LtJ?55n@+~mvMHa6I)Fl6JHn}VKh?Af0E
zz%Te0ygv7Sf8L^29j%(OJ+L}@%N%Rj8tB5l(fj?5QyZ-+0R(|DKSc963HOK684E6(
z3Ab1lwO%)BVZmf0uV>*V1-H0Zo`^USnPDTjLCY8CLRbit&29!WLRgD4yd0Iz_8Lkl
z#|fECFfx#J3<!n7vDVF6ofgzA?w8O(x$05jaymz7Dk{eN1|zVoB5zx|nYM9&6}onm
zOu3}vQ`Ib14J3<FN^#>zspBR(kPRgiGynn!f+Qt_j%8DBCYHo+*0^Slz&Jlf#kqki
zlX5GJmlzg=b6JI{AvkVnK^N#3$}}ho0K?K6?rRj2c^oXkjcAWY0D1tEC|`G?Z79QI
z7*u81C??`=J*cAPn>8CSlOX4hY5-E#lUTrW+iX5+xVcEx%C~YHqxRr@glW5>Fx`{|
zTPXS%9HhGdp(dpo6IV<97=e(a*zM;eh-aKwh(@)6+3{pS&~9k9Bl;V5iA-@mhG7(=
z3>u!89guy|G?_pyqW}Wv)DwED?j__tQ2|`JLz;ZO(d>tCo8)aVSgrP1Ko5{UAP~U^
z5zzDmv{(qy@fHDwLw16M>S>hXIU`tYh+ZXOkw`e$tS87yJ=>J6Am@g_qLQ{CUjarn
zEP-3a0vMMn0`Ep~QWvFM6E8YJR3waKMgWUerBjo!Xj;reh|;SOHdujzSh?njJ{isk
zDY4kfONOJX(P*qJ_R&IyKm&Ez$qr&dx!rQ4W*|)J?LapksMTA^Ku{a7I6=#5GUP)f
z0)YyVKBhX6IzcB$f{$rEP?6QPA?D$VWOlns&;xU|1O&t^xrsJpH=zI!*N{4<3i?bV
z-|NGXkfiZxs+3A}YmkNXZlrx<C7|2mWX`Wi*+QeOv>~|^2ZKQ=Ru&L~VgrO7=`|wB
zg6_da)(f`ec*y65L2v#Z9?bN4imy1V!g?8?(bOdsYs-w1EeD}IPbGl-mozAcq4O(o
zvn3wJLV!e)3KkWqAY%nIvqP&!tciH(K#l?+Z-6OKZC=aA$qrmAW4S<_)QAFTc^T8i
ztaMrl1GGM<qd<eg;#|D?rN3pUKFVr-I0(o}6iDjb2;E0RGTe$K3gtpo)3h!e#z?GW
z#Y;^Rl!=DVs=GZF=WE4Q+(3hhROq=8Ud>sZiU5^pb<osRK4}qIv6TLQlH3Y?&8TKq
zMW^b|_<PkfOZj4@GQ_aiK}F2y^JB>PMn^~eWvLnOb|PJtrO2e=VD<S%WVMlr>utVD
zBdMeTq#_NXWkw^uk&y$Z?m6KEwvMjIE<ZN=o!h52r`9gor=FNty*={8!QIc_{^6D{
zZaaJ5zt;U==HkKY?_PV_?`&M~z=c)G=^kmv4y^yjl@fJLpZ?Dp@8F>a7ri{S^c?og
zM?;rPV*KGh+b7Q?7k8%?LBdl=ck>3}?!!NP>j?4L)H|OR=Gvhz5~s(>k;xrrZpkk>
zu--m<WXE<RvD0^W3-sh`$A0_=dT#g7%lh<-*vEfAJ@NHNPrbS=yqEuc=&w_Y4=uZQ
zQ+WJN`sab)t=RbS!Ur6t@w4CFvzgko|Bvs#kiN3|^elPcEd1W|u5B-_@;&jRS66OY
z^8Ak7fp_<P`&#ecM=@?@<|`K;e<gk2*7)7t`7Nc{TYvKYufF=rb<{5=9-1JJ-ucPW
zVbEHc+jZetY~*d8!XIhwcw_mc%L^CJJ$HQW1oOzr`dab$?A-7Nmj~L;;amSUVU@qX
z?9;}~T^}qsEq`<9*mJ9Ix$wriHRsuTNq5;x-}uw)OIhZh#+BQI$?C5Awe1`CY@6iX
zS(zGHvEiq$yZhdA_uuiD`q}y6g~lp!WYvb|p4nfItvz+}yMOuGV|ih3#lEz!v*7ZE
z^?TP|y*j28(d!?+@cYT;;_-v-Q~g6npwiIRk)86UvFVitv3)iA3UfTV|C9edb7AR&
zSFe9`agFmm&jXG;I(hib8FT-cJD$D#ruxvg9)4@=?Wytbp2vqjpFDc*H>o98N&joh
G&;1V;B#e0g

literal 0
HcmV?d00001

diff --git a/machines/web01/secrets/secrets.nix b/machines/web01/secrets/secrets.nix
index 87eaede..89d67fc 100644
--- a/machines/web01/secrets/secrets.nix
+++ b/machines/web01/secrets/secrets.nix
@@ -3,6 +3,7 @@ let
   publicKeys = lib.getNodeKeys "web01";
 in lib.setDefault { inherit publicKeys; } [
   "acme-certs_secret"
+  "matterbridge-config_file"
   "named-bind_dnskeys_conf"
   "ntfy_sh-environment_file"
   "plausible_admin-user-password-file"