nix/nixos/hosts/framework-server/containers.nix

{ lib, self, inputs, outputs, stateVersion, hmStateVersion, ... }:
let 
  libx = import ../../../lib { inherit lib self inputs outputs stateVersion hmStateVersion; };
  lanInterface = "enp0s13f0u4";
in {
  containers = {
    rdesktop = libx.mkContainer { hostname = "rdesktop"; unfree = true; desktop = "xfce"; ephemeral = true; };
  };  

  networking = {
    nat.enable = true;
    nat.internalInterfaces = [ "ve-+" ];
    nat.externalInterface = lanInterface;
    firewall.extraCommands = ''iptables -t nat -A POSTROUTING -o ${lanInterface} -j MASQUERADE'';
  };

}