{
  lib,
  pkgs,
  ...
}:
pkgs.dockerTools.buildImage {
  name = "nix-coder";
  tag = "latest";

  copyToRoot = pkgs.buildEnv {
    name = "image-root";
    paths = [
      pkgs.bashInteractive
      pkgs.nixFlakes
      pkgs.coreutils-full
      pkgs.curl
      pkgs.home-manager
      pkgs.direnv
    ];
    pathsToLink = ["/bin"];
  };

  config = {
    Cmd = ["/bin/bash"];
    Env = ["SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"];
  };
}