{
  self,
  hostPath,
  tree,
  inputs,
  config,
  pkgs,
  lib,
  ...
}: let
  inherit (lib.modules) mkForce;
in {
  containers.piped-db = {
    autoStart = true;
    privateNetwork = false;

    specialArgs = {
      inherit inputs;
      inherit tree;
      inherit self;
      inherit hostPath;
    };

    config = {...}: {
      nixpkgs.pkgs = pkgs;

      imports = with tree; [
        presets.nixos.containerBase
        ./secrets.nix

        ./profiles/postgres.nix
        ./profiles/restic.nix
      ];

      networking.firewall.enable = mkForce false;

      home-manager.users.root.home.stateVersion = "23.05";
      system.stateVersion = "23.05";
    };
  };
}