{ config, lib, pkgs, ... }:
{
  virtualisation.podman = {
    enable = true;
    # Rootless containers by default
    # .container files in /etc/containers/systemd/ are auto-detected
  };

  # Nix-declared containers
  virtualisation.oci-containers = {
    backend = "podman";
    containers = {
      nginx-example = {
        image = "nginx:latest";
        ports = [ "9999:80" ];
      };
    };
  };
}