{
	containers.filebrowser = {
		autoStart = true;
		privateNetwork = true;
		hostBridge = "br-lan0";
		localMacAddress = "02:00:00:00:00:05";

		# Host path
		bindMounts = {
			"/var/lib/filebrowser/data" = {
				hostPath = "/media";
				isReadOnly = true;
			};
		};

		config = { lib, pkg, config, ... }: {
			# Network
			networking.interfaces.eth0.useDHCP = true;
			networking.firewall.allowedTCPPorts = [ 80 8080 ];  # Caddy + filebrowser

			# Filebrowser
			services.filebrowser.enable = true;
			services.filebrowser.settings.address = "0.0.0.0";

			# Reverse proxy
			services.caddy = {
				enable = true;
				virtualHosts.":80".extraConfig = ''
					reverse_proxy localhost:8080
				'';
			};

			system.stateVersion = "26.05";
		};
	};
}