{
    config,
    pkgs,
    inputs,
    ...
}: {
  services.matrix-conduit = {
    enable = true;

    package = inputs.conduit.packages.${pkgs.system}.default;

    settings.global = {
      server_name = "jacekpoz.pl";
      database_backend = "rocksdb";
      port = 6167;
      allow_registration = true;
    };
  };

  services.caddy = {
    enable = true;
    virtualHosts."m.jacekpoz.pl".extraConfig = ''
      reverse_proxy /_matrix/* localhost:6167
    '';
    virtualHosts."matrix.jacekpoz.pl".extraConfig = ''
      reverse_proxy /_matrix/* localhost:6167
    '';
    virtualHosts."jacekpoz.pl:8448".extraConfig = ''
      reverse_proxy /_matrix/* localhost:6167
    '';
  };

  networking.firewall.allowedTCPPorts = [ 80 443 8448 ];
  networking.firewall.allowedUDPPorts = [ 80 443 8448 ];
}