---
credentials:
  litellm_api_key:
    description: Per-consumer virtual key for the shared svc-ai-litellm gateway
    algorithm: sk_prefixed
    validation:
      min_length: 50
  administrator_password:
    description: Initial administrator password for the Matrix homeserver
    algorithm: sha256
    validation: ^[a-f0-9]{64}$
  generic_secret_key:
    description: Generic secret used by Synapse for key signing and session management
    algorithm: sha256
    validation: ^[a-f0-9]{64}$
  database_password:
    description: Password for the Matrix PostgreSQL database
    algorithm: bcrypt
    validation: ^\$2[aby]\$.{56}$
  registration_shared_secret:
    description: Secret token used to allow shared registration from external sources
    algorithm: sha256
    validation: ^[a-f0-9]{64}$
  macaroon_secret_key:
    description: Secret key used to sign macaroon tokens for authentication
    algorithm: sha256
    validation: ^[a-f0-9]{64}$
  form_secret:
    description: Secret for form token protection (used in web registration flows)
    algorithm: sha256
    validation: ^[a-f0-9]{64}$
  chatgpt_bridge_openai_api_key:
    description: Key the Matrix ChatGPT bridge presents to its inference endpoint, the shared gateway when svc-ai-litellm is deployed
    algorithm: sk_prefixed
    validation:
      min_length: 50
  chatgpt_bridge_access_token:
    description: Access token used by the ChatGPT bridge for authentication
    algorithm: plain
    validation: ^[a-zA-Z0-9-_]{20,}$
  chatgpt_bridge_user_password:
    description: Matrix user password used by the ChatGPT bridge
    algorithm: sha256
    validation: ^[a-f0-9]{64}$
  mautrix_meta_bridge_database_password:
    description: Database password for the mautrix-meta bridge (Facebook Messenger + Instagram)
    algorithm: bcrypt
    validation: ^\$2[aby]\$.{56}$
  mautrix_meta_bridge_as_token:
    description: Appservice token the mautrix-meta bridge presents to Synapse
    algorithm: alphanumeric
    validation: ^[A-Za-z0-9]{64}$
  mautrix_meta_bridge_hs_token:
    description: Token Synapse presents to the mautrix-meta bridge
    algorithm: alphanumeric
    validation: ^[A-Za-z0-9]{64}$
  mautrix_signal_bridge_as_token:
    description: Appservice token the mautrix-signal bridge presents to Synapse
    algorithm: alphanumeric
    validation: ^[A-Za-z0-9]{64}$
  mautrix_signal_bridge_hs_token:
    description: Token Synapse presents to the mautrix-signal bridge
    algorithm: alphanumeric
    validation: ^[A-Za-z0-9]{64}$
  mautrix_slack_bridge_as_token:
    description: Appservice token the mautrix-slack bridge presents to Synapse
    algorithm: alphanumeric
    validation: ^[A-Za-z0-9]{64}$
  mautrix_slack_bridge_hs_token:
    description: Token Synapse presents to the mautrix-slack bridge
    algorithm: alphanumeric
    validation: ^[A-Za-z0-9]{64}$
  mautrix_telegram_bridge_as_token:
    description: Appservice token the mautrix-telegram bridge presents to Synapse
    algorithm: alphanumeric
    validation: ^[A-Za-z0-9]{64}$
  mautrix_telegram_bridge_hs_token:
    description: Token Synapse presents to the mautrix-telegram bridge
    algorithm: alphanumeric
    validation: ^[A-Za-z0-9]{64}$
  mautrix_whatsapp_bridge_as_token:
    description: Appservice token the mautrix-whatsapp bridge presents to Synapse
    algorithm: alphanumeric
    validation: ^[A-Za-z0-9]{64}$
  mautrix_whatsapp_bridge_hs_token:
    description: Token Synapse presents to the mautrix-whatsapp bridge
    algorithm: alphanumeric
    validation: ^[A-Za-z0-9]{64}$
  mautrix_signal_bridge_database_password:
    description: Database password for the mautrix-signal bridge
    algorithm: bcrypt
    validation: ^\$2[aby]\$.{56}$
  mautrix_slack_bridge_database_password:
    description: Database password for the mautrix-slack bridge
    algorithm: bcrypt
    validation: ^\$2[aby]\$.{56}$
  mautrix_telegram_bridge_database_password:
    description: Database password for the mautrix-telegram bridge
    algorithm: bcrypt
    validation: ^\$2[aby]\$.{56}$
  mautrix_telgegram_bridge_api_id:
    description: Telegram API ID for the mautrix-telegram bridge
    algorithm: plain
    validation: ^\d{5,}$
  mautrix_telgegram_bridge_api_pin:
    description: Telegram API hash or PIN for the mautrix-telegram bridge
    algorithm: plain
    validation: ^[a-zA-Z0-9]{10,}$
  mautrix_whatsapp_bridge_database_password:
    description: Database password for the mautrix-whatsapp bridge
    algorithm: bcrypt
    validation: ^\$2[aby]\$.{56}$
  mautrix_whatsapp_bridge_provisioning_shared_secret:
    description: Shared secret for the mautrix-whatsapp bridge provisioning endpoint
    algorithm: sha256
    validation: ^[a-f0-9]{64}$