{
  virtualisation = {
    containers.enable = true;
    podman.enable = true;
    oci-containers.containers = {
      forgejo = {
        image = "codeberg.org/forgejo/forgejo:9";
        volumes = [
          "forgejo-data:/data"
          "/etc/localtime:/etc/localtime:ro"
        ];
        labels = {
          swag = "enable";
          swag_url = "git.icanttype.org";
          swag_port = "3000";
        };
        ports = [ "10022:22" ];
        extraOptions = [
          "--pull=newer"
          "--network=www"
        ];
      };
    };
  };
}