{
  virtualisation = {
    containers.enable = true;
    podman.enable = true;
    oci-containers.containers = {
      swag = {
        image = "lscr.io/linuxserver/swag:latest";
        volumes = [ "swag-config:/config" ];
        environment = {
          TZ = "America/New_York";
          URL = "icanttype.org";
          VALIDATION = "dns";
          SUBDOMAINS = "wildcard";
          DNSPLUGIN = "cloudflare";
          DOCKER_HOST = "dockerproxy";
          DOCKER_MODS = "linuxserver/mods:swag-dashboard|linuxserver/mods:swag-auto-proxy|linuxserver/mods:universal-docker|linuxserver/mods:universal-cloudflared";
          CF_ZONE_ID = "4e68852334290a922718696a0986e75a";
          CF_ACCOUNT_ID = "5c1c252b9d9a9af6ea3a5de8590f36fa";
          CF_API_TOKEN = "mRfY8ubtFUxzVuehI6WFipSQFIcstCNds7RF5FTQ";
          CF_TUNNEL_NAME = "icanttype.org";
          CF_TUNNEL_PASSWORD = "iZh4UYxVSo3S2H3XwwboM2z@mJEqYJkQ5yMTfd5p";
          FILE__CF_TUNNEL_CONFIG = "/config/tunnelconfig.yml";
          EMAIL = "cdombroski@gmail.com";
        };
        ports = [
          "80:80"
          "443:443"
        ];
        extraOptions = [
          "--pull=newer"
          "--network=www"
          "--cap-add"
          "NET_ADMIN"
          "--network-alias=icanttype.org"
        ];
      };
    };
  };
}