{
  # <https://voidcruiser.nl/rambles/i2p-on-nixos/>
  containers.i2pd = {
    autoStart = true;

    config = {
      system.stateVersion = "24.05";

      networking.firewall.allowedTCPPorts = [
        7656
        7070
        4447
        4444
      ];

      services.i2pd =
        let
          address = "0.0.0.0";
        in
        {
          inherit address;

          enable = true;
          upnp.enable = true;
          bandwidth = 512;
          websocket.address = address;
          yggdrasil.address = address;
          reseed.verify = true;

          proto = {
            bob.address = address;

            i2pControl = {
              inherit address;

              enable = true;
            };

            socksProxy = {
              inherit address;

              enable = true;
            };

            http = {
              inherit address;

              enable = true;
              strictHeaders = false;
            };

            i2cp = {
              inherit address;

              enable = true;
            };

            sam = {
              inherit address;

              enable = true;
            };

            httpProxy = {
              inherit address;

              enable = true;
              # outproxy = "http://false.i2p";
              # outproxy = "http://purokishi.i2p:4444";
              # outproxy = "http://outproxy.acetone.i2p:3128";
              outproxy = "http://exit.stormycloud.i2p:4444";
              # outproxy = "http://outproxy.bandura.i2p:4444";
            };
          };

          addressbook.subscriptions = [
            "http://inr.i2p/export/alive-hosts.txt"
            "http://i2p-projekt.i2p/hosts.txt"
            "http://stats.i2p/cgi-bin/newhosts.txt"
            "http://reg.i2p/export/hosts.txt"
            "http://notbob.i2p/hosts.txt"
          ];
        };
    };
  };
}