{ secrets, config, ... }:
{
  virtualisation.oci-containers.containers.beszel-agent = {
    image = "henrygd/beszel-agent";
    autoStart = true;
    volumes = [ "/var/run/docker.sock:/var/run/docker.sock:ro" ];
    extraOptions = config.modules.containers.extraOptions ++ [ "--network=host" ];

    ports =
      let
        port = builtins.toString 45876;
      in
      [ "127.0.0.1:${port}:${port}" ];

    environment = {
      PORT = "45876";
      KEY = "ssh-ed25519 ${secrets.beszel_agent_public_key}";
    };
  };
}