{
    config,
    pkgs,
    inputs,
    ...
}: {
    services.matrix-conduit = {
        enable = true;

        package = inputs.conduit.packages.${pkgs.system}.default;

        settings.global = {
            server_name = "jacekpoz.pl";
            database_backend = "rocksdb";
            port = 6167;
            allow_registration = true;
        };
    };

    services.caddy = {
        enable = true;
        virtualHosts."m.jacekpoz.pl".extraConfig = ''
            reverse_proxy /_matrix/* localhost:6167
        '';
        virtualHosts."jacekpoz.pl:8448".extraConfig = ''
            reverse_proxy /_matrix/* localhost:6167
        '';
    };

    networking.firewall.allowedTCPPorts = [ 80 443 8448 ];
    networking.firewall.allowedUDPPorts = [ 80 443 8448 ];
}