From a014a172a3d1bd6432c13f58c8cb328d48c9018e Mon Sep 17 00:00:00 2001
From: David Crompton <davidcrompton@duck.com>
Date: Thu, 12 Feb 2026 01:18:32 -0500
Subject: [PATCH] hippocampus: enable registration

---
 machines/hippocampus/servers/public/matrix/server.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/machines/hippocampus/servers/public/matrix/server.nix b/machines/hippocampus/servers/public/matrix/server.nix
index ff81b37..31b2573 100644
--- a/machines/hippocampus/servers/public/matrix/server.nix
+++ b/machines/hippocampus/servers/public/matrix/server.nix
@@ -1,4 +1,7 @@
 { config, pkgs, lib, ... }: {
+  sops.secrets.tuwunelreg = {
+    owner = config.services.matrix-tuwunel.user;
+  };
   services.matrix-tuwunel = {
     enable = true;
     stateDirectory = "tuwunel";
@@ -12,6 +15,11 @@
         server_name = "glia.club";
         allow_federation = false;
         allow_encryption = true;
+
+        new_user_displayname_suffix = "🌱";
+
+        allow_registration = true;
+        registration_token_file = config.sops.secrets.tuwunelreg.path;
       };
     };
   };