{ pkgs, ... }: let json = pkgs.formats.json { }; in { virtualisation = { podman = { enable = true; dockerCompat = true; defaultNetwork.settings = { driver = "macvlan"; network_interface = "server"; subnets = [ { subnet = "10.42.97.0/24"; gateway = "10.42.97.1"; } ]; ipv6_enabled = false; internal = false; dns_enabled = false; ipam_options = { driver = "dhcp"; }; }; }; }; systemd.sockets."netavark-dhcp-proxy" = { description = "Netavark DHCP proxy socket"; socketConfig = { ListenStream = "%t/podman/nv-proxy.sock"; SocketMode = 0660; }; wantedBy = [ "sockets.target" ]; }; systemd.services."netavark-dhcp-proxy" = { description = "Netavark DHCP proxy service"; after = [ "netavark-dhcp-proxy.socket" ]; requires = [ "netavark-dhcp-proxy.socket" ]; wantedBy = [ "multi-user.target" "netavark-dhcp-proxy.socket" ]; path = [ pkgs.netavark ]; startLimitIntervalSec = 0; serviceConfig = { Type = "exec"; ExecStart= "${pkgs.netavark}/bin/netavark dhcp-proxy -a 30"; }; }; }