{
  config,
  pkgs,
  lib,
  ...
}:

let
  jellyseerrPort = 5055;
  dataDir = "/var/lib/jellyseerr";
in
{
  containers.jellyseerr = {
    autoStart = true;
    privateNetwork = true;
    hostAddress = "10.0.1.18";
    localAddress = "10.0.1.52";
    hostAddress6 = "fc00::1";
    localAddress6 = "fc00::4";

    bindMounts = {
      ${dataDir} = {
        hostPath = "/media/nas/ssd/nix-app-data/jellyseerr";
        isReadOnly = false;
      };
    };

    config =
      {
        config,
        pkgs,
        lib,
        ...
      }:
      {
        # Enable jellyseerr service
        services.jellyseerr = {
          enable = true;
          port = jellyseerrPort;
          # package = package;
          openFirewall = true;
        };

        networking = {
          firewall = {
            enable = true;
            allowedTCPPorts = [ jellyseerrPort ];
          };
          # Use systemd-resolved inside the container
          # Workaround for bug https://github.com/NixOS/nixpkgs/issues/162686
          useHostResolvConf = lib.mkForce false;
        };

        services.resolved.enable = true;
        system.stateVersion = "23.11";
      };
  };

  networking.nat = {
    forwardPorts = [
      {
        destination = "10.0.1.52:5055";
        sourcePort = jellyseerrPort;
      }
    ];
  };
}