{config, ...}: {
  nixpkgs.config.permittedInsecurePackages = [
    "olm-3.2.16"
  ];
  services.mautrix-whatsapp = {
    enable = true;
    registerToSynapse = true;
    settings = {
      database = {
        type = "sqlite3-fk-wal";
        uri = "file:/var/lib/mautrix-whatsapp/mautrix-whatsapp.db?_txlock=immediate";
      };
      homeserver = {
        address = "http://localhost:8008";
        domain = "tristans.cloud";
      };
      bridge = {
        permissions = {
          "tristans.cloud" = "user";
          "@tristan:tristans.cloud" = "admin";
        };
        personal_filtering_spaces = true;
      };
      encryption = {
        allow = true;
        appservice = false;
        pickle_key = "maunium.net/go/mautrix-whatsapp";
      };
    };
  };
}