{
  pkgs,
  lib,
  config,
  ...
}: {
  virtualisation.podman.enable = true;
  virtualisation.oci-containers.backend = "podman";

  services.unifi-os-server = {
    enable = true;
    uosSystemIP = "10.0.0.10";
    openFirewallUiPort = true;
    openFirewallServicePorts = true;
  };
}