{ lib, modulesPath, pkgs, ... }:

{
  imports = [
    "${modulesPath}/virtualisation/lxc-container.nix"
    ./configuration.nix
  ];

  networking = {
    dhcpcd.enable = false;
    useDHCP = false;
    useHostResolvConf = false;
    hostId = "08171908";
    hostName = "kinzo";
  };

  systemd.network = {
    enable = true;
    networks."50-eth0" = {
      matchConfig.Name = "eth0";
      networkConfig = {
        DHCP = "ipv4";
        IPv6AcceptRA = false;
      };
      linkConfig.RequiredForOnline = "routable";
    };
  };

  users.users.puchie.extraGroups = ["podman"];

  virtualisation = {
    containers.enable = true;
    oci-containers = {
      backend = "podman";
      containers = {
        actual = {
          image = "docker.io/actualbudget/actual-server:25.12.0-alpine";
          ports = ["0.0.0.0:5006:5006"];
          volumes = ["/var/actualbudget:/data"];
        };
        forgejo = {
          environment = {
            FORGEJO__server__SSH_PORT = "222";
          };
          image = "codeberg.org/forgejo/forgejo:13";
          ports = ["0.0.0.0:3001:3000" "0.0.0.0:222:22"];
          volumes = ["/var/forgejo:/data" "/etc/localtime:/etc/localtime:ro"];
        };
        homepage = {
          environment = {
            HOMEPAGE_ALLOWED_HOSTS = "home.puchie.dev";
          };
          image = "ghcr.io/gethomepage/homepage:latest";
          ports = ["0.0.0.0:3000:3000"];
          volumes = ["/var/homepage:/app/config"];
        };
        nxpm = {
          image = "docker.io/jc21/nginx-proxy-manager:2.13.5";
          ports = ["0.0.0.0:80:80" "0.0.0.0:81:81" "0.0.0.0:443:443"];
          volumes = ["/var/nginx-proxy-manager:/data" "/var/lets-encrypt:/etc/letsencrypt"];
        };
        vaultwarden= {
          environment = {
            DOMAIN = "https://vault.puchie.dev";
            ENABLE_DB_WAL = "false";
          };
          image = "docker.io/vaultwarden/server:1.35.1-alpine";
          ports = ["0.0.0.0:8000:80"];
          volumes = ["/var/vaultwarden:/data"];
        };
      };
    };

    podman = {
      enable = true;
      dockerCompat = true;
    };
  };
}