From 9557a301be14b25fe43ba072b6b22bc6ad4a9fb5 Mon Sep 17 00:00:00 2001
From: Victor Mignot <root@victormignot.fr>
Date: Tue, 16 Jul 2024 08:25:20 +0200
Subject: [PATCH] Camelot: Add matrix-appservice-discord

---
 configurations/camelot/default.nix          |  1 +
 configurations/camelot/matrix.nix           | 28 +++++++++++++++++++++
 configurations/camelot/secrets/secrets.yaml |  7 +++---
 3 files changed, 33 insertions(+), 3 deletions(-)

diff --git a/configurations/camelot/default.nix b/configurations/camelot/default.nix
index bac8aa6..dc82270 100644
--- a/configurations/camelot/default.nix
+++ b/configurations/camelot/default.nix
@@ -82,6 +82,7 @@
       nextcloud_admin_pw = {
         owner = config.users.users.nextcloud.name;
       };
+      discord_bridge_token = { };
     };
   };
 
diff --git a/configurations/camelot/matrix.nix b/configurations/camelot/matrix.nix
index 6c4c582..d913f92 100644
--- a/configurations/camelot/matrix.nix
+++ b/configurations/camelot/matrix.nix
@@ -62,4 +62,32 @@ in {
   };
 
   networking.firewall.allowedTCPPorts = [ 443 8448 ];
+
+  services.matrix-appservice-discord = {
+    enable = true;
+    settings = {
+      bridge = {
+        domain = "dalaran.fr";
+        homeserverUrl = "https://matrix.dalaran.fr";
+        disableTypingNotifications = true;
+        disableJoinLeaveNotifications = true;
+        adminMxid = "dala@dalaran.fr";
+      };
+
+      ghosts = {
+        usernamePattern = ":username";
+      };
+
+      auth = {
+        usePrivilegedIntents = true;
+      };
+
+      room = {
+        defaultVisibility = "private";
+      };
+    };
+    environmentFile = config.sops.secrets.discord_bridge_token.path;
+    
+    serviceDependencies = [ "conduit.service" ];
+  };
 }
diff --git a/configurations/camelot/secrets/secrets.yaml b/configurations/camelot/secrets/secrets.yaml
index 77d801e..b5fb7d9 100644
--- a/configurations/camelot/secrets/secrets.yaml
+++ b/configurations/camelot/secrets/secrets.yaml
@@ -1,6 +1,7 @@
 wg0_private: ENC[AES256_GCM,data:nuHHAwi+l9BQ8oJupm+i47EbfFc62QZXDeATeE+23RAEq/grJ/bN6sTn/o4=,iv:hZQAvvcCe2DOTvM1mABB26PsEqw8jpQUNhGbBaK/l0I=,tag:9VMaJys4IzelbBdCDuiy0Q==,type:str]
 wg1_private: ENC[AES256_GCM,data:tpetT5qyude2G1hRt4lPONhJMSSdHt6V92yY/NhgeZRQkZZg9WIdHAMI2JM=,iv:78Sn0Thki4LkHBM37x618Oc3FjztYoXEzMSoRQGmnFk=,tag:RV9cYT1A68gBrPpwS0npIg==,type:str]
 nextcloud_admin_pw: ENC[AES256_GCM,data:MKD4sEOfpvd0GWcA/CHcbV5/uLI=,iv:4WJ0S9OvumWZu4i5EYkX+b3OCODKc7IkUzWsd1GtngA=,tag:phIRRR8dTFwCGwUps3P7tQ==,type:str]
+discord_bridge_token: ENC[AES256_GCM,data:2ZVIjMjRLuQbTgzJc7DLpkapAIR4ntbvaw+bqFQLNQd1FKdnf9V7+Zk1AhkGfV5gOyA7ezXvexLQHYN5ACL4vMwghke7x3cyKjUteDq2EpjFZzrA9ZljUdBE6JMq8xbFWHr3wi+27dPFaA==,iv:fxHTLOYCJxd8rJFHzWM0+XgACGOjdNYauPqdVBiR648=,tag:eRJgBcXT6MsVDMurWRFocA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -16,8 +17,8 @@ sops:
             b00xT3ZHWTJBNFlUbTUrRjlVV0FoM1UKtfWg4R4Y28r2w8MYp1B1yhFEOBT8rEkz
             P5qEP0p1i/zXlglaxxXTiQSuloG1Fwi2l5VGrhm6Hse07u3fEmS2VQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-04-11T18:31:57Z"
-    mac: ENC[AES256_GCM,data:6paQrkMjdjZ3/RUkQ7fa+FeK5/Byz3hTUeKUFzm3kx3iaFhV7D+J2DdKUED/H5c0aBXmL/RnFHSTnZ73tAWl80ALVHVtuwWKrhu/0pV4a9MCPKCiX4VB8cz60fZfaXZ/7198tcJI+Yl9zff+fzrRgBXNqi794giz7D7U76tza3Q=,iv:0xGn0z9Fm5eD2n2cXSlErPenfNpnAbxQf16cSG4HGCY=,tag:axMyKGIe76zAN7UB0GVH0w==,type:str]
+    lastmodified: "2024-07-16T08:31:32Z"
+    mac: ENC[AES256_GCM,data:RqgsunO2nepjEFjbMiXPUR1TIupPKe58eh/WobltFF7vSR2TSmUC7sGtUygpfvXq/YHyCQbQvIBp/q4D+uvJ5l0iD1NEakj1UgOq7WN8imDv0UzCIztMFUQ3BT1q32SblaW/H5yNYfiB1poxIwYyetW8thi/vPyDzHJVYiNYXsk=,iv:q8//bLXIrL44yxRKQK7emHfIp2sSM7tlxdQiUD0BIqo=,tag:V+sGjmsm0A70u3vdDwtXHA==,type:str]
     pgp:
         - created_at: "2023-12-10T17:24:42Z"
           enc: |
@@ -32,4 +33,4 @@ sops:
             -----END PGP MESSAGE-----
           fp: 2763F2B50E63CE401A3EB9C040DE2FEE4D3C5E2C
     unencrypted_suffix: _unencrypted
-    version: 3.8.1
+    version: 3.9.0