{ ... }:

{
  # Those mautrix bridges rely on old unsafe megolm. Since they only talk to
  # localhost, they are safe.
  nixpkgs.config.permittedInsecurePackages = [
    "olm-3.2.16"
  ];

  services.mautrix-whatsapp = {
    enable = true;

    settings = {

      homeserver = {
        address = "https://matrix.morj.men";
        domain = "morj.men";
      };

      appservice = {
        hostname = "127.0.0.1";
        database.type = "sqlite3-fk-wal";
        database.uri = "file:/var/lib/mautrix-whatsapp/mautrix-whatsapp.db?_txlock=immediate";
      };

      bridge.permissions = {
        "*" = "relay";
        "@admin:morj.men" = "admin";
        "@morj:morj.men" = "user";
        "@rognar30:morj.men" = "user";
      };
      bridge.encryption.allow = true;
    };
  };

  services.mautrix-discord = {
    enable = true;

    settings = {

      homeserver = {
        address = "https://matrix.morj.men";
        domain = "morj.men";
      };

      appservice = {
        hostname = "127.0.0.1";
        database.type = "sqlite3-fk-wal";
        database.uri = "file:/var/lib/mautrix-discord/mautrix-discord.db?_txlock=immediate";
      };

      bridge.permissions = {
        "*" = "relay";
        "@admin:morj.men" = "admin";
        "@morj:morj.men" = "user";
      };
      bridge.encryption.allow = true;
    };
  };
}