{ config, ... }:
let
  inherit (import ./lib.nix config) mkContainer blazestar;
  traefikConfigDir = builtins.path {
    name = "traefik-config";
    path = ./traefik;
  };
in {
  virtualisation.oci-containers.containers.traefik = mkContainer {
      image = "traefik";
      hostName = "proxy";
      port = 8080;
      domain = blazestar;
      public = false;
      ports = [
        "443:443"
        "80:80"
      ];
      volumes =
      [
        "/var/run/podman/podman.sock:/var/run/docker.sock:ro"
        "${traefikConfigDir}:/etc/traefik"
        "/tank/config/traefik/acme:/etc/traefik/acme"
      ];
      homepageOpts = {
        name = "Traefik";
        icon = "traefik.svg";
        group = "Infra";
        description = "Reverse Proxy";
      };
    };
  }