{
  mylib,
  config,
  lib,
  pkgs,
  ...
}: let
  # Match this with the portainer agent version
  portainerVersion = "2.33.3";
in {
  virtualisation.oci-containers.containers = {
    portainer = {
      image = "portainer/portainer-ce:${portainerVersion}";
      autoStart = true;

      login = mylib.containers.mkDockerLogin config;

      dependsOn = [];

      ports = [
        # "8000:8000"
        # "9443:9443"
      ];

      volumes = [
        "portainer_config:/data"

        "/var/run/docker.sock:/var/run/docker.sock"
      ];

      environment = {};

      extraOptions = [
        "--net=behind-nginx"
      ];
    };
  };
}