{
	containers.gitea = {
		autoStart = true;
		privateNetwork = true;
		extraVeths.vb-gitea = {
			hostBridge = "br-lan0";
			#localMacAddress = "02:00:00:00:00:03";  # TODO update to 26.05
		};

		config = { lib, pkgs, config, ... }: {
			# Network
			networking.interfaces.vb-gitea.useDHCP = true;
			networking.firewall.allowedTCPPorts = [ 80 22 ];  # Caddy + ssh

			# Gitea
			services.gitea = {
				enable = true;
				user = "git";  # So ssh cloning uses git@gitea
			};

			# Reverse proxy
			services.caddy = {
				enable = true;
				virtualHosts.":80".extraConfig = ''
					reverse_proxy localhost:3000
				'';
			};

			system.stateVersion = "25.11";
		};
	};
}