{ config, pkgs, ... }:

{
  virtualisation = {
    docker.enable = true;
    oci-containers.containers = {
      rustdesk-server = {
        image = "rustdesk/rustdesk-server-s6:1";
        volumes = [ "/var/lib/rustdesk-server:/data" ];
        environment = {
          RELAY = "rustdesk.cloonar.com:21117";
        };
        ports = [
          "21115:21115"
          "21116:21116"
          "21116:21116/udp"
          "21118:21118"
          "21117:21117"
          "21119:21119"
        ];
      };
    };
  };

  users.users.rustdesk-server = {
    isSystemUser = true;
    group = "rustdesk-server";
    home = "/var/lib/rustdesk-server";
    createHome = true;
  };
  users.groups.rustdesk-server = { };
  users.groups.docker.members = [ "rustdesk-server" ];

  networking.firewall = {
    enable = true;
    allowedTCPPorts = [ 5000 21115 21116 21117 21118 21119 ];
    allowedUDPPorts = [ 21116 ];
  };
}