{ pkgs, ... }:
pkgs.dockerTools.buildImage {
  name = "sish";
  fromImage = pkgs.docker-image-base;

  copyToRoot = pkgs.buildEnv {
    name = "root";
    paths = with pkgs; [ sish ];
    pathsToLink = [ "/bin" ];
  };

  config = {
    Entrypoint = [ "sish" ];
    Cmd = [
      "--ssh-address=0.0.0.0:2222"
      "--http-address=0.0.0.0:80"
      "--load-templates=false"
      "--private-keys-directory=/etc/sish/keys"
      "--authentication-password=\"\""
      "--authentication-keys-directory=/etc/sish/pubkeys"
    ];
    ExposedPorts = {
      "2222/tcp" = { };
    };
    WorkingDir = "/etc/sish";
    Volumes = {
      "/etc/sish/keys" = { };
      "/etc/sish/pubkeys" = { };
    };
  };
}