{ ... }:

{
  boot.kernel.sysctl = {
    "net.ipv6.conf.all.forwarding" = true;
    "net.ipv4.conf.all.forwarding" = true;
  };

  networking.firewall.interfaces.podman1 = {
    allowedTCPPorts = [ 53 ];
    allowedUDPPorts = [ 53 ];
  };

  virtualisation.podman = {
    enable = true;
    dockerSocket.enable = true;
    autoPrune = {
      enable = true;
      dates = "weekly";
    };
    defaultNetwork.settings = {
      dns_enabled = true;
      ipv6_enabled = true;
      subnets = [
        {
          gateway = "10.88.0.1";
          subnet = "10.88.0.0/16";
        }
        {
          gateway = "fd10:88::1";
          subnet = "fd10:88::/64";
        }
      ];
    };
  };
}