{ config, nixpkgs-mongodb, system, ... }: let
  pkgs = import nixpkgs-mongodb {
    config.allowUnfree = true;
    inherit system;
  };
in {
  environment.systemPackages = [ pkgs.mongosh pkgs.mongodb-tools ];
  services.mongodb.enable = true;
  services.mongodb.enableAuth = true;
  services.mongodb.bind_ip = "0.0.0.0";
  services.mongodb.initialRootPassword = "changeme";
  services.mongodb.package = pkgs.mongodb-6_0;

  networking.firewall.extraCommands =
    "iptables -A INPUT -s 192.168.0.4 -p tcp --dport 27017 -j ACCEPT";
}