{
  config,
  lib,
  pkgs,
  ...
}:
let
  cfg = config.homelab.virtualization;
in
{
  config = lib.mkMerge [
    (lib.mkIf cfg.podman.enable {
      virtualisation = {
        oci-containers.backend = "podman";
        podman = {

          enable = true;

          dockerCompat = true;
          defaultNetwork.settings.dns_enabled = true;
        };
      };

      # For rootless containers
      security.unprivilegedUsernsClone = true;

      users.users.${cfg.user} = {
        subUidRanges = [
          {
            startUid = 100000;
            count = 65536;
          }
        ];
        subGidRanges = [
          {
            startGid = 100000;
            count = 65536;
          }
        ];

        extraGroups = [
          "podman"
        ];
      };
    })

    (lib.mkIf cfg.podman.packages.enable {
      environment.systemPackages = with pkgs; [
        podman
        podman-compose
        podman-desktop
      ];
    })
  ];
}