{ secrets, config, ... }:
{
  virtualisation.oci-containers.containers.beszel-agent = {
    image = "henrygd/beszel-agent";
    autoStart = true;
    ports = [ "127.0.0.1:45876:45876" ];
    volumes = [ "/var/run/docker.sock:/var/run/docker.sock:ro" ];
    extraOptions = config.modules.containers.extraOptions ++ [ "--network=host" ];

    environment = {
      PORT = "45876";
      KEY = "ssh-ed25519 ${secrets.beszel_agent_public_key}";
    };
  };
}