{config, ...}: let
  inherit (config) sops;
  inherit (sops) templates placeholder;
  inherit (import ./lib.nix) toAppRegistration;
in {
  sops.secrets = {
    "mautrix-signal/as_token" = {};
    "mautrix-signal/hs_token" = {};
  };
  sops.templates = {
    "mautrix-signal/appservice.yaml" = {
      owner = "matrix-synapse";
      content = toAppRegistration {
        id = "signal";
        port = 29328;
        as_token = placeholder."mautrix-signal/as_token";
        hs_token = placeholder."mautrix-signal/hs_token";
        sender_localpart = "Gx8tLTHsxVlrdD3qibaPdaP9t7GhfciV";
        "de.sorunome.msc2409.push_ephemeral" = true;
      };
    };
  };

  # mautrix-signal server currently in ansible/podman

  services.matrix-synapse.settings.app_service_config_files = [
    templates."mautrix-signal/appservice.yaml".path
  ];
}