{
  pkgs,
  config,
  ...
}: {
  config = {
    services.matrix-synapse = {
      enable = true;
      settings.server_name = config.networking.domain;
      settings.listeners = [
        {
          port = 8008;
          bind_addresses = ["::1"];
          type = "http";
          tls = false;
          x_forwarded = true;
          resources = [
            {
              names = ["client" "federation"];
              compress = true;
            }
          ];
        }
      ];
    };
    networking.firewall.allowedTCPPorts = [80 443];
  };
}