{ config, pkgs, ... }:

{
  services.cockpit = {
    enable = true;
    openFirewall = true;
    port = 9090;
    allowed-origins = [ "http://0.0.0.0:9090" "https://0.0.0.0:9090" "http://localhost:9090" ];
    settings = {
      WebService = {
        AllowUnencrypted = true;
      };
    };
  };
}