{
  config,
  lib,
  pkgs,
  ...
}: let
  nginxVersion = "2.12.6";
in {
  virtualisation.oci-containers.containers = {
    nginx-proxy-manager = {
      image = "jc21/nginx-proxy-manager:${nginxVersion}";
      autoStart = true;

      login = {
        # Uses DockerHub by default
        # registry = "";

        # DockerHub Credentials
        username = "christoph.urlacher@protonmail.com";
        passwordFile = "${config.sops.secrets.docker-password.path}";
      };

      dependsOn = [];

      ports = [
        "80:80"
        # "81:81" # Web interface
        "443:443"
      ];

      volumes = [
        "nginx_config:/data"
        "nginx_snippets:/snippets"
        "nginx_letsencrypt:/etc/letsencrypt"
      ];

      environment = {
        DISABLE_IPV6 = "true";
      };

      extraOptions = [
        # "--net=host"
        "--net=behind-nginx"
      ];
    };
  };
}