nix/container/default.nix

{ lib, config, ... }: with lib; let
	cfg = config.container;
in {
	options = {
		container = {
			enable = mkEnableOption "Containers!!";

			autoStart = mkOption {
				default = false;
				type    = types.bool;
			};

			host = mkOption {
				default = "0.0.0.0";
				type    = types.str;
			};

			localAccess = mkOption {
				default = "0.0.0.0";
				type    = types.str;
			};

			storage = mkOption {
				default = "/tmp/container";
				type    = types.str;
			};

			domain = mkOption {
				default = "local";
				type    = types.str;
			};

			interface = mkOption {
				default = "lo";
				type    = types.str;
			};

			media = mkOption {
				default = {};
				type    = types.attrs;
			};
		};
	};

	config = mkIf cfg.enable {
		# This is the network for all the containers.
		# They are not available to the external interface by default,
		# instead they all expose specific ports in their configuration.
		networking = {
			nat = {
				enable = true;
				internalInterfaces = [ "ve-+" ];
				externalInterface = config.container.interface;
			};
			networkmanager.unmanaged = [ "interface-name:ve-*" ];
		};
	};
}