{config, pkgs, lib, ...}:
{
  containers.quassel = {
    config = { config, pkgs, ... }: {
      services.postgresql = {
        enable = true;
        package = pkgs.postgresql94;
        extraConfig = ''
          max_connections = 10
          shared_buffers = 1GB
          effective_cache_size = 4GB
          work_mem = 50MB
          maintenance_work_mem = 100MB
        '';
      };
      services.quassel = {
        # https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/services/networking/quassel.nix
        enable = true;
        interfaces = ["0.0.0.0"];
      };
      environment.systemPackages = [
        pkgs.quasselDaemon
      ];
      networking.firewall.allowedTCPPorts = [4242];
    };
    privateNetwork = true;
    hostAddress = "192.168.125.1";
    localAddress = "192.168.125.11";
  };
  # give the containers networking
  networking.nat = {
    enable = true;
    internalInterfaces = ["ve-+"];
    externalInterface = "enp2s0";
    forwardPorts = [
      { sourcePort = 4242; destination = "192.168.125.11:4242"; }
    ];    
  };
  networking.firewall.allowedTCPPorts = [4242];
}