container.nix

{ config, pkgs, ... }:
{
    containers.webserver =
        { privateNetwork = true;
          hostAddress = "192.168.101.1";
          localAddress = "192.168.101.2";
          autoStart = true;
          forwardPorts = [ { protocol = "tcp"; hostPort = 80; containerPort = 80; } ];
          config =
            { services.httpd.enable = true;
              services.httpd.adminAddr = "foo@example.org";
              networking.firewall.allowedTCPPorts = [ 80 ];
              networking.firewall.allowPing = true;
            };
        };

      networking.firewall.allowedTCPPorts = [ 80 ];
}