Similar here, but I'm running rootless podman containers in Guix like this:

  (oci-container-configuration
        (environment
         '("CRON_MIN=2,32"
           "LISTEN=0.0.0.0:80"
           "OIDC_ENABLED=0"))
        (image "freshrss/freshrss:edge")
        (log-file (container-log "freshrss"))
        (extra-arguments
         '("--pod=freshrss"))
        (provision "freshrss")
        (respawn? #t)
        (volumes
         '("...")))