{
  services.cockpit = {
    enable = true;
    port = 9999;
    openFirewall = true;
    allowed-origins = [ "192.168.178.69:9999" ];
    settings = {
      WebService = {
        AllowUnencrypted = true;
      };
    };
  };
}