nix/container/default.nix

{ lib, config, ... }: with lib; let
	cfg = config.container;
in {
	options = {
		container = {
			enable = mkEnableOption "Containers!!";

			autoStart = mkOption {
				default = true;
				type    = types.bool;
			};

			host = mkOption {
				default = "0.0.0.0";
				type    = types.str;
			};

			localAccess = mkOption {
				default = "0.0.0.0";
				type    = types.str;
			};

			storage = mkOption {
				default = "/tmp/container";
				type    = types.str;
			};

			domain = mkOption {
				default = "local";
				type    = types.str;
			};

			interface = mkOption {
				default = "lo";
				type    = types.str;
			};

			media = mkOption {
				default = {};
				type    = types.attrs;
			};
		};
	};

	config = mkIf cfg.enable {
		# This is the network for all the containers.
		# They are not available to the external interface by default,
		# instead they all expose specific ports in their configuration.
		networking.nat = {
			enable = true;
			internalInterfaces = [ "ve-+" ];
			externalInterface = config.container.interface;
		};
	};
}