nixos-config/hosts/x86_64-linux/beleth/conduit.nix

{
  config,
  lib,
  inputs,
  ...
}: {
  services.matrix-conduit = {
    enable = true;
    settings = {
      global = {
        server_name = "matrix.heroin.trade";
        allow_federation = true;
        allow_encryption = true;
        allow_registration = false;
        max_request_size = 20000000;
        address = "::1";
        port = 6167;
        database_backend = "sqlite";
        turn_uris = [
          "turn:staticauth.openrelay.metered.ca:80?transport=udp"
          "turn:staticauth.openrelay.metered.ca:80?transport=tcp"
        ];
        turn_secret = "openrelayprojectsecret";
      };
      extraEnvironment = {
        CONDUIT_MAX_CONCURRENT_REQUESTS = "100";
      };
    };
  };

  networking.firewall.allowedTCPPorts = [config.services.matrix-conduit.settings.global.port];
}