{
	containers.transmission-wg = let
		home = "/var/lib/transmission";
		download-dir = "${home}/complete";
		incomplete-dir = "${home}/incomplete";
		wg-conf = "${home}/wg0.conf";
	in {
		autoStart = true;
		privateNetwork = false;  # TODO
		enableTun = true;
		bindMounts = {
			"${download-dir}" = {
				hostPath = "";  # FIXME
				isReadOnly = false;
			};
			"${incomplete-dir}" = {
				hostPath = "";  # FIXME
				isReadOnly = false;
			};
		};

		config = { lib, config, ... }: {
			services.transmission = {
				inherit home;
				enable = true;

				settings = {
					inherit download-dir incomplete-dir;
					rpc-bind-address = "0.0.0.0";
					rpc-whitelist = "*";
					rpc-whitelist-enable = false;
				};
			};

			#networking.wg-quick.interfaces = {
			#	wg0.configFile = wg-conf;
			#};

			# TODO remove (#258793)
			systemd.services.transmission.serviceConfig = {
				RootDirectoryStartOnly = lib.mkForce null;
				RootDirectory = lib.mkForce null;
			};

			system.stateVersion = "25.11";
		};
	};
}