{
  pkgs,
  inputs,
  system,
  ...
}:
let
  selfPkgs = inputs.self.packages.${system};

  entrypoint = pkgs.writeTextFile {
    name = "entrypoint";
    executable = true;
    destination = "/bin/entrypoint";
    text = builtins.readFile ./entrypoint.sh;
  };
in
pkgs.dockerTools.buildImage {
  name = "prometheus-fail2ban-exporter";
  fromImage = import ../base { inherit pkgs; };

  copyToRoot = pkgs.buildEnv {
    name = "root";
    paths = [
      entrypoint
      selfPkgs.prometheus-fail2ban-exporter
    ];
    pathsToLink = [ "/bin" ];
  };

  config = {
    Entrypoint = [ "entrypoint" ];
    ExposedPorts = {
      "9191/tcp" = { };
    };
  };
}