{
  pkgs,
  config,
  service_configs,
  ...
}:
{
  imports = [
    ../secrets/matrix_reg_token.nix
  ];

  services.matrix-conduit = {
    enable = true;
    package = pkgs.conduwuit;
    # package = pkgs.conduwuit.overrideAttrs (old: {
    #   cargoBuildFeatures = pkgs.lib.remove "release_max_log_level" old.cargoBuildFeatures;
    # });

    settings.global = {
      port = 6167;
      server_name = "matrix.${service_configs.https.domain}";
      database_backend = "rocksdb";
      allow_registration = true;

      trusted_servers = [
        "matrix.org"
        "envs.net"
      ];

      # without this, conduit fails to start
      address = "0.0.0.0";
    };
  };

  systemd.tmpfiles.rules = [
    "d /var/lib/private/matrix-conduit 0750 conduit conduit"
  ];
}