mob next [ci-skip] [ci skip] [skip ci]

lastFile:machines/rigel/configuration.nix

inventories/default.nix

@@ -327,7 +327,6 @@
                 enable = true;
                 homeserverUrl = "https://matrix.org";
                 matrixUser = "@kuroiris:matrix.org";
-                tokenFile = "";
                 matrixRooms = [
                   {
                     receivers = [

machines/rigel/configuration.nix

@@ -1,4 +1,4 @@
-{ config, ... }:
+{ config, pkgs, ... }:
 {
   system.stateVersion = "25.11";
   clan.core.sops.defaultGroups = [ "admins" ];
@@ -8,12 +8,23 @@
   clan.core.vars.generators.prometheus = {
     files.envFile.secret = true;
     files.matrix-alertmanager-token.secret = true;
+    files.matrix-alertmanager-secret.secret = true;
     script = ''
       echo "" > $out/envFile
       echo "" > $out/matrix-alertmanager-token
+      openssl rand -hex 32 > "$out"/matrix-alertmanager-secret
     '';
+    runtimeInputs = [
+      pkgs.openssl
+    ];
   };
+
   services.prometheus.alertmanager.environmentFile =
     config.clan.core.vars.generators.prometheus.files.envFile.path;
 
+  services.matrix-alertmanager.tokenFile =
+    config.clan.core.vars.generators.prometheus.files.matrix-alertmanager-token.path;
+  services.matrix-alertmanager.secretFile =
+    config.clan.core.vars.generators.prometheus.files.matrix-alertmanager-secret.path;
+
 }