{
  lib,
  config,
  kubenix,
  ...
}: {
  kubernetes.helm.releases.ingress-nginx = {
    namespace = "ingress-nginx";
    chart = kubenix.lib.helm.fetch {
      repo = "https://kubernetes.github.io/ingress-nginx";
      chart = "ingress-nginx";
      version = "4.9.1";
      sha256 = "sha256-EJjNTC7nQUbGnS0xgF/eWyKs3vBpRPbbZmwl/pd9/44=";
    };
    values = {
      controller = {
        kind = "DaemonSet";
        metrics = {
          enabled = true;
          additionalLabels.release = "prometheus";
        };
        podAnnotations = {
          "prometheus.io/scrape" = "true";
          "prometheus.io/port" = "10254";
        };
        ingressClassResource.default = true;
        publishService.enabled = true;
        service.externalTrafficPolicy = "Local";
        hostNetwork = true;
      };
    };
  };
}