{ pkgs, service_configs, ... }:
{
  services.bitmagnet = {
    enable = true;

    settings = {
      postgres = {
        host = service_configs.postgres.socket;
      };
      http_server = {
        port = ":" + (builtins.toString service_configs.ports.bitmagnet);
      };
    };
  };

  systemd.services.bitmagnet.vpnConfinement = {
    enable = true;
    vpnNamespace = "wg";
  };

}