{ pkgs, ... }:
{
  project.name = "vnc-desktop";

  services.vnc = {
    service = {
      image = "forge.quinefoundation.com/ironmagma/vnc-desktop:latest";
      container_name = "vnc-desktop";
      restart = "unless-stopped";
      env_file = [ "/run/agenix/vnc-password" ];
      volumes = [
        "/root/.ssh:/root/host-ssh:ro"
      ];
      extra_hosts = [ "hetzner-host:host-gateway" ];
      ports = [ "127.0.0.1:6080:6080" ];
    };
  };
}