# Matrix secret mapping module

Provides a declarative helper for mapping entries in `secrets/secrets.yaml`
to the file paths expected by Matrix services.  Each secret is defined once,
then delivered via sops-nix to `/run/secrets/...` with the correct owner and
permissions.

Example:

```
{
  matrix.secrets = {
    "matrix-services.mautrix_whatsapp.as_token" = {
      key = "matrix-services.mautrix_whatsapp.as_token";
      path = "/run/secrets/mautrix-whatsapp-as-token";
      user = "mautrix-whatsapp";
      group = "mautrix-whatsapp";
      mode = "0400";
    };
    # ...
  };
}
```