{ pkgs, config, ... }:

{
  config = {
    services.matrix-synapse = {
        enable = true;
        settings.server_name = config.networking.domain;
        settings.listeners = [
          { port = 8008;
            bind_addresses = [ "::1" ];
            type = "http";
            tls = false;
            x_forwarded = true;
            resources = [ {
              names = [ "client" "federation" ];
              compress = true;
            } ];
          }
        ];
    };
    networking.firewall.allowedTCPPorts = [80 443];
  };
}