{ config, pkgs, lib, ... }:

{
  virtualisation.podman.enable = true;
  virtualisation.oci-containers.backend = "podman";
  virtualisation.oci-containers.containers = {
    site = {
      image = "git.orga.cebula.camp/infra/site:golden";
      ports = [ "10.88.0.1:9001:80" ];
    };
  };
  services.nginx.virtualHosts."cebula.camp" = {
    forceSSL = true;
    enableACME = true;
    locations."/" = {
      proxyPass = "http://10.88.0.1:9001/";
      proxyWebsockets = true;
    };
  };
}