{
  config,
  ...
}:
{
  virtualisation.podman = {
    autoPrune = {
      enable = true;
    };
    defaultNetwork.settings = {
      dns_enabled = false;
    };
  };

  assertions = [
    {
      assertion =
        (config.virtualisation.podman.defaultNetwork.settings.dns_enabled && config.services.dnsmasq.enable)
        -> config.services.dnsmasq.settings.bind-interfaces != true;
      message = "Need to use bind-interfaces in dnsmasq when using dns in a podman network";
    }
  ];
}