{config, lib, pkgs, ...}: let
  root_host = "grimmauld.de";
  bridge_port = 9005; # netstat -nlp | grep 9005
in {
  age.secrets.matrix_discord_bridge_token.file = ../secrets/matrix_discord_bridge_token.age;

  services.matrix-synapse-next.settings.app_service_config_files = [ "/var/lib/matrix-synapse/discord-registration.yaml" ];

  services.matrix-appservice-discord = {
    enable = true;
    settings = {
      auth = {
        usePrivilegedIntents = true; # typing status and stuff
      };
      bridge = {
        enableSelfServiceBridging = true;
        domain = root_host;
        homeserverUrl = "https://${root_host}";
      };
    };
    port = bridge_port;
    localpart = "_discord_bot";
    environmentFile = config.age.secrets.matrix_discord_bridge_token.path;
  };
}