{ pkgs, config, ... }:
{
  networking.firewall.allowedTCPPorts = [
    25565
  ];
  networking.firewall.allowedUDPPorts = [
    19132
  ];

  containers.minecraft = {
    autoStart = true;
    ephemeral = true;
    bindMounts = {
      pubkey = {
        hostPath = "/var/lib/minecraft";
        mountPoint = "/var/lib/minecraft";
        isReadOnly = false;
      };
    };
    config =
      { ... }:
      {
        networking = {
          useHostResolvConf = false;
          firewall.checkReversePath = "loose";
          nameservers = config.networking.nameservers;
        };

        services.resolved = {
          enable = true;
          settings.Resolve = {
            DNSSEC = "true";
            DNSOverTLS = "true";
            Domains = [ "~." ];
            FallbackDns = [ ];
          };
        };

        services.minecraft-server = {
          enable = true;
          eula = true;
          openFirewall = true;
          package = pkgs.papermc;
          jvmOpts = "-Xms2G -Xmx16G";
        };

        system.stateVersion = "26.05";
      };
  };
}