{
  virtualisation.oci-containers.containers.portainer = {
    image = "docker.io/portainer/portainer-ce:latest";
    ports = ["127.0.0.1:9000:9000"];
    volumes = [
      "/etc/localtime:/etc/localtime:ro"
      "/run/podman/podman.sock:/var/run/docker.sock:ro"
      "portainer_data:/data"
    ];
  };
  # Traefik configuration specific to baserow
  services.traefik.dynamicConfigOptions.http = {
    services.portainer.loadBalancer.servers = [
      {
        url = "http://localhost:9000/";
      }
    ];

    routers.portainer = {
      rule = "Host(`pt.az-gruppe.com`)";
      tls = {
        certResolver = "ionos";
      };
      service = "portainer";
      entrypoints = "websecure";
    };
  };
}