{ ... }:

{
  services = {
    jitsi-meet = {
      enable = true;
      hostName = "jitsi-ng.auro.re";

      nginx.enable = true;
      videobridge.enable = true;

      config = {
        liveStreaming.enabled = true;
      };
    };

    jitsi-videobridge = {
      enable = true;
      openFirewall = true;
      colibriRestApi = true;
    };

    # Monitoring
    prometheus.exporters.jitsi = {
      enable = true;
      openFirewall = true;
    };
  };

  networking.firewall.allowedTCPPorts = [ 80 443 ];

  security.acme = {
    acceptTerms = true;
    defaults.email = "tech.aurore@lists.crans.org";
  };

  nixpkgs.config.permittedInsecurePackages = [
    "jitsi-meet-1.0.8043"
  ];
}