{
  pkgs,
  inputs,
  system,
  ...
}:
let
  selfPkgs = inputs.self.packages.${system};
in
pkgs.dockerTools.buildImage {
  name = "oidcwarden";
  fromImage = import ../base { inherit pkgs; };

  copyToRoot = pkgs.buildEnv {
    name = "root";
    paths = with selfPkgs; [
      oidcwarden
      oidcwarden.webvault
    ];
    pathsToLink = [
      "/bin"
      "/share"
    ];
  };

  config = {
    Entrypoint = [ "/bin/oidcwarden" ];
    Env = [
      "WEB_VAULT_FOLDER=${selfPkgs.oidcwarden.webvault}/share/vaultwarden/vault"
      "DATA_FOLDER=/var/lib/vaultwarden"
      "ROCKET_PROFILE=release"
      "ROCKET_ADDRESS=0.0.0.0"
    ];
    Volumes = {
      "/var/lib/vaultwarden" = { };
    };
    ExposedPorts = {
      "8000/tcp" = { };
    };
  };
}