{ ... }:
{
  services.postgresql = {
    ensureUsers = [
      {
        name = "mautrix-whatsapp";
        ensureDBOwnership = true;
      }
    ];
    ensureDatabases = [ "mautrix-whatsapp" ];
  };

  services.mautrix-whatsapp = {
    enable = true;
    settings = {
      homeserver = {
        address = "http://127.0.0.1:8008";
        domain = "cyperpunk.de";
      };
      database = {
        type = "postgres";
        uri = "postgres:///mautrix-whatsapp?host=/run/postgresql&sslmode=disable";
      };
      bridge.permissions = {
        "cyperpunk.de" = "user";
        "@dergrumpf:cyperpunk.de" = "admin";
      };
    };
  };
}