✨ [pi4] Containerize Actual service

hosts/pi4/actual.nix

@@ -1,9 +1,24 @@
 { config, common, ... }:
 let
-  cfg = config.services.actual.settings;
   domain = "beta.budget.${common.domain}";
 in
 {
+  networking.nat = {
+    enable = true;
+    internalInterfaces = [ "ve-*" ];
+    externalInterface = "wlan0";
+    # Lazy IPv6 connectivity for the container
+    enableIPv6 = true;
+  };
+
+  containers.actual = {
+    autoStart = true;
+    privateNetwork = true;
+    hostAddress = "192.168.10.188";
+    localAddress = "192.168.10.11";
+    config =
+      { ... }:
+      {
         services = {
           actual = {
             enable = true;
@@ -12,13 +27,16 @@ in
               loginMethod = "password";
             };
           };
-    nginx.virtualHosts.${domain} = {
+        };
+        system.stateVersion = common.system.version;
+      };
+  };
+  services.nginx.virtualHosts.${domain} = {
     forceSSL = true;
     enableACME = true;
     locations."/" = {
-        proxyPass = "http://localhost:${toString cfg.port}";
+      proxyPass = "http://${config.containers.actual.localAddress}:8084";
       proxyWebsockets = true;
     };
   };
-  };
 }