{ secrets, ... }:
{
  virtualisation.oci-containers.containers.beszel-agent = {
    image = "henrygd/beszel-agent";
    autoStart = true;
    ports = [ "127.0.0.1:45876:45876" ];
    volumes = [ "/var/run/docker.sock:/var/run/docker.sock:ro" ];

    extraOptions = [
      "--network=host"
      "--restart=on-failure"
    ];

    environment = {
      PORT = "45876";
      KEY = "ssh-ed25519 ${secrets.beszel_agent_public_key}";
    };
  };
}