{ config, ... }: let workDir = "/srv/containers/actualbudget"; in { systemd.tmpfiles.rules = [ "d ${workDir} 2700 root admin" ]; virtualisation.oci-containers.containers.actualbudget = { autoStart = true; image = "actualbudget/actual-server:latest-alpine"; ports = [ "0.0.0.0:10004:5006" ]; volumes = [ "${workDir}:/data" ]; }; }