try docker

system/services/docker/portainer/default.nix

@@ -0,0 +1,26 @@
+{ config, lib, ... }: lib.mkIf config.sysconfig.services.docker.enable {
+
+    options.sysconfig.docker.portainer.enable = with lib; mkOption {
+        type = with types; bool;
+        default = true;
+    };
+
+    config = lib.mkIf config.sysconfig.docker.portainer.enable {
+
+        virtualisation.oci-containers.contianers.portainer = {
+            image = "portainer/portainer-ce";
+
+            pull = "newer";
+
+            ports = [
+                "127.0.0.1:8000:8000"
+                "127.0.0.1:9000:9000"
+            ];
+
+            volumes = [
+                "vol_portainer:/data"
+                "/run/docker.sock:/var/run/docker.sock"
+            ];
+        };
+    };
+}