{
	containers.gitea = {
		autoStart = true;
		privateNetwork = true;
		hostBridge = "br-lan0";
		localMacAddress = "02:00:00:00:00:03";

		config = { lib, pkgs, config, ... }: {
			# Network
			networking.interfaces.eth0.useDHCP = true;
			networking.firewall.allowedTCPPorts = [ 80 22 ];  # Caddy + ssh

			# Gitea
			services.gitea = {
				enable = true;
				#user = "git";  # So ssh cloning uses git@gitea
			};

			# SSH for repositories
			services.openssh.enable = true;

			# Reverse proxy
			services.caddy = {
				enable = true;
				virtualHosts.":80".extraConfig = ''
					reverse_proxy localhost:3000
				'';
			};

			system.stateVersion = "25.11";
		};
	};
}