{ pkgs, ... }:
{
  services.prosody = {
    enable = true;
    admins = [ "root@prosody.katzen.cafe" ];
    virtualHosts."prosody.katzen.cafe" = {
      domain = "prosody.katzen.cafe";
      enabled = true;
    };
    ssl = {
      key = "/var/lib/acme/prosody.katzen.cafe/key.pem";
      cert = "/var/lib/acme/prosody.katzen.cafe/fullchain.pem";
    };
    uploadHttp = {
      domain = "uploads.prosody.katzen.cafe";
    };
    muc = [ {
      domain = "conference.prosody.katzen.cafe";
    } ];
  };
  networking.firewall = {
    allowedTCPPorts = [ 5280 5281 ];
  };
}