{config, ...}: {
  m3ta.ports = {
    enable = true;

    definitions = {
      ssh = 2022;

      traefik = 80;
      traefik-ssl = 443;

      gitea = 3030;
      outline = 3031;
      vaultwarden = 3032;
      ntfy-sh = 3033;
      zammad = 3034;
      it-tools = 3035;
      zammad-hr = 3036;
      zammad-hr-elasticsearch = 3037;
      netbird = 3038;
      azion-scheduler = 3039;
      azion-scheduler-proxy = 3049;

      metabase = 3013;
      baserow = 3050;

      librechat = 3040;
      librechat-dev = 3141;
      rag-api = 8000;
      rag-api-dev = 8100;
      litellm = 4000;

      n8n = 5678;
      kestra = 5080;
      zugferd-service = 5060;
      gotenberg = 5070;

      portainer = 9000;

      postgres = 5432;
      pgadmin = 5050;
    };

    hostOverrides = {
      AZ-CLD-1 = {
        baserow = 3050;
        librechat-dev = 3141;
        rag-api-dev = 8100;
      };

      AZ-PRM-1 = {
        baserow = 3051;
        kestra = 5080;
        stirling-pdf = 3032;
        bpi = 3033;
      };
    };
  };

  environment.etc."info/all-ports.json".text = builtins.toJSON {
    hostname = config.networking.hostName;
    ports = config.m3ta.ports.all;
  };
}