{ config, ... }:
{
  virtualisation.oci-containers = {
    backend = "podman";
    containers.homeassistant = {
      volumes = [
        "/var/lib/home-assistant:/config"
        "/run/dbus:/run/dbus:ro"
        "/var/lib/syncthing/Music:/music"
      ];
      environment.TZ = config.time.timeZone;
      image = "ghcr.io/home-assistant/home-assistant:2024.12";
      extraOptions = [ "--network=host" ];
    };
  };
  networking.firewall = {
    allowedTCPPorts = [
      1400
      1443
    ];
    allowedUDPPorts = [
      1400
      1443
      5353
    ];
  };
  services.caddy.virtualHosts."home.xenia.me.uk".extraConfig = "reverse_proxy http://localhost:8123";
}