{config, ...}: {
  m3ta.ports = {
    enable = true;
    definitions = {
      # System services
      ssh = 2022;

      # Web & proxy services
      traefik = 80;
      traefik-ssl = 443;

      # Databases
      postgres = 5432;
      mysql = 3306;
      redis = 6379;
    };

    hostOverrides = {
      # Host-specific overrides
      AZ-LT-NIX = {
        # Any custom port overrides for m3-ares
      };
    };
  };
  environment.etc."info/all-ports.json" = {
    text = builtins.toJSON {
      hostname = config.networking.hostName;
      ports = config.m3ta.ports.all; # TODO should only return actually used ports
    };
  };
}