{ pkgs, ... }:
pkgs.dockerTools.buildImage {
  name = "oidcwarden";
  fromImage = import ../base { inherit pkgs; };

  copyToRoot = pkgs.buildEnv {
    name = "root";
    paths = with pkgs; [
      oidcwarden
      oidcwarden.webvault
    ];
    pathsToLink = [
      "/bin"
      "/share"
    ];
  };

  config = {
    Entrypoint = [ "oidcwarden" ];
    Env = [
      "WEB_VAULT_FOLDER=${pkgs.oidcwarden.webvault}/share/vaultwarden/vault"
      "DATA_FOLDER=/var/lib/vaultwarden"
      "ROCKET_PROFILE=release"
      "ROCKET_ADDRESS=0.0.0.0"
    ];
    WorkingDir = "/var/lib/vaultwarden";
    Volumes = {
      "/var/lib/vaultwarden" = { };
    };
    ExposedPorts = {
      "8000/tcp" = { };
    };
  };
}