dotfiles/system/nixos/arion.nix

{ pkgs, config, secret, ... }:

{
  environment.systemPackages = [
    pkgs.arion
  ];

  virtualisation = {
    docker.enable = false;

    podman = {
      enable = true;
      dockerSocket.enable = true;
      defaultNetwork.settings.dns_enabled = true;
    };

    containers.containersConf.cniPlugins = with pkgs; [
      cni-plugins
      dnsname-cni
    ];

    oci-containers.backend = "podman";

    arion = {
      backend = "podman-socket";
    };
  };

  networking.firewall.interfaces."podman1".allowedUDPPorts = [ 53 ];
  networking.firewall.interfaces."podman2".allowedUDPPorts = [ 53 ];
  networking.firewall.interfaces."podman3".allowedUDPPorts = [ 53 ];
}