{config, ...}: {
  nixpkgs.config.permittedInsecurePackages = [
    "olm-3.2.16"
  ];

  services.mautrix-whatsapp = {
    enable = true;
    registerToSynapse = true;
    settings = {
      homeserver = {
        address = "http://localhost:8008";
        domain = "tristans.cloud";
      };
      bridge = {
        permissions = {
          "tristans.cloud" = "user";
          "@tristan:tristans.cloud" = "admin";
        };
        encryption = {
          allow = true;
          appservice = false;
        };
        personal_filtering_spaces = true;
      };
    };
  };
}