{...}: let
  conduitPort = 6167;
in {
  networking.firewall.allowedTCPPorts = [conduitPort];

  services = {
    matrix-conduit = {
      enable = true;
      settings = {
        global = {
          server_name = "alderaan.fi";
          database_backend = "rocksdb";
          port = conduitPort;
          max_request_size = 50000000;
          allow_registration = false;
          allow_federation = true;
          allow_check_for_updates = false;
          enable_lightning_bolt = false;
          trusted_servers = ["matrix.org"];
          address = "0.0.0.0";
        };
      };
    };
  };

  system.stateVersion = "24.05";
}