diff --git a/modules/containers/docker/karakeep/docker-compose.nix b/modules/containers/docker/karakeep/docker-compose.nix
new file mode 100644
index 0000000..134c619
--- /dev/null
+++ b/modules/containers/docker/karakeep/docker-compose.nix
@@ -0,0 +1,188 @@
+# Auto-generated by compose2nix.
+
+{ pkgs, lib, ... }:
+
+{
+  # Runtime
+  virtualisation.docker = {
+    enable = true;
+    autoPrune.enable = true;
+  };
+  virtualisation.oci-containers.backend = "docker";
+
+  # Containers
+  virtualisation.oci-containers.containers."karakeep-chrome" = {
+    image = "gcr.io/zenika-hub/alpine-chrome:124";
+    cmd = [ "--no-sandbox" "--disable-gpu" "--disable-dev-shm-usage" "--remote-debugging-address=0.0.0.0" "--remote-debugging-port=9222" "--hide-scrollbars" ];
+    log-driver = "journald";
+    extraOptions = [
+      "--network-alias=chrome"
+      "--network=karakeep_default"
+    ];
+  };
+  systemd.services."docker-karakeep-chrome" = {
+    serviceConfig = {
+      Restart = lib.mkOverride 90 "always";
+      RestartMaxDelaySec = lib.mkOverride 90 "1m";
+      RestartSec = lib.mkOverride 90 "100ms";
+      RestartSteps = lib.mkOverride 90 9;
+    };
+    after = [
+      "docker-network-karakeep_default.service"
+    ];
+    requires = [
+      "docker-network-karakeep_default.service"
+    ];
+    partOf = [
+      "docker-compose-karakeep-root.target"
+    ];
+    wantedBy = [
+      "docker-compose-karakeep-root.target"
+    ];
+  };
+  virtualisation.oci-containers.containers."karakeep-meilisearch" = {
+    image = "getmeili/meilisearch:v1.13.3";
+    environment = {
+      "DATA_DIR" = "/mnt/myjfs/volumes/hoarder/";
+      "INFERENCE_IMAGE_MODEL" = "gemini-2.0-flash";
+      "INFERENCE_TEXT_MODEL" = "gemini-2.0-flash";
+      "KARAKEEP_VERSION" = "release";
+      "MEILI_NO_ANALYTICS" = "true";
+      "NEXTAUTH_URL" = "http://localhost";
+      "OPENAI_BASE_URL" = "https://generativelanguage.googleapis.com/v1beta";
+    };
+    environmentFiles = [
+      /etc/nixos/secrets/karakeep.env
+    ];
+    volumes = [
+      "karakeep_meilisearch:/meili_data:rw"
+    ];
+    log-driver = "journald";
+    extraOptions = [
+      "--network-alias=meilisearch"
+      "--network=karakeep_default"
+    ];
+  };
+  systemd.services."docker-karakeep-meilisearch" = {
+    serviceConfig = {
+      Restart = lib.mkOverride 90 "always";
+      RestartMaxDelaySec = lib.mkOverride 90 "1m";
+      RestartSec = lib.mkOverride 90 "100ms";
+      RestartSteps = lib.mkOverride 90 9;
+    };
+    after = [
+      "docker-network-karakeep_default.service"
+      "docker-volume-karakeep_meilisearch.service"
+    ];
+    requires = [
+      "docker-network-karakeep_default.service"
+      "docker-volume-karakeep_meilisearch.service"
+    ];
+    partOf = [
+      "docker-compose-karakeep-root.target"
+    ];
+    wantedBy = [
+      "docker-compose-karakeep-root.target"
+    ];
+  };
+  virtualisation.oci-containers.containers."karakeep-web" = {
+    image = "ghcr.io/karakeep-app/karakeep:release";
+    environment = {
+      "BROWSER_WEB_URL" = "http://chrome:9222";
+      "DATA_DIR" = "/data";
+      "INFERENCE_IMAGE_MODEL" = "gemini-2.0-flash";
+      "INFERENCE_TEXT_MODEL" = "gemini-2.0-flash";
+      "KARAKEEP_VERSION" = "release";
+      "MEILI_ADDR" = "http://meilisearch:7700";
+      "NEXTAUTH_URL" = "http://localhost";
+      "OPENAI_BASE_URL" = "https://generativelanguage.googleapis.com/v1beta";
+    };
+    environmentFiles = [
+      /etc/nixos/secrets/karakeep.env
+    ];
+    volumes = [
+      "karakeep_data:/data:rw"
+    ];
+    ports = [
+      "3000:3000/tcp"
+    ];
+    log-driver = "journald";
+    extraOptions = [
+      "--network-alias=web"
+      "--network=karakeep_default"
+    ];
+  };
+  systemd.services."docker-karakeep-web" = {
+    serviceConfig = {
+      Restart = lib.mkOverride 90 "always";
+      RestartMaxDelaySec = lib.mkOverride 90 "1m";
+      RestartSec = lib.mkOverride 90 "100ms";
+      RestartSteps = lib.mkOverride 90 9;
+    };
+    after = [
+      "docker-network-karakeep_default.service"
+      "docker-volume-karakeep_data.service"
+    ];
+    requires = [
+      "docker-network-karakeep_default.service"
+      "docker-volume-karakeep_data.service"
+    ];
+    partOf = [
+      "docker-compose-karakeep-root.target"
+    ];
+    wantedBy = [
+      "docker-compose-karakeep-root.target"
+    ];
+  };
+
+  # Networks
+  systemd.services."docker-network-karakeep_default" = {
+    path = [ pkgs.docker ];
+    serviceConfig = {
+      Type = "oneshot";
+      RemainAfterExit = true;
+      ExecStop = "docker network rm -f karakeep_default";
+    };
+    script = ''
+      docker network inspect karakeep_default || docker network create karakeep_default
+    '';
+    partOf = [ "docker-compose-karakeep-root.target" ];
+    wantedBy = [ "docker-compose-karakeep-root.target" ];
+  };
+
+  # Volumes
+  systemd.services."docker-volume-karakeep_data" = {
+    path = [ pkgs.docker ];
+    serviceConfig = {
+      Type = "oneshot";
+      RemainAfterExit = true;
+    };
+    script = ''
+      docker volume inspect karakeep_data || docker volume create karakeep_data
+    '';
+    partOf = [ "docker-compose-karakeep-root.target" ];
+    wantedBy = [ "docker-compose-karakeep-root.target" ];
+  };
+  systemd.services."docker-volume-karakeep_meilisearch" = {
+    path = [ pkgs.docker ];
+    serviceConfig = {
+      Type = "oneshot";
+      RemainAfterExit = true;
+    };
+    script = ''
+      docker volume inspect karakeep_meilisearch || docker volume create karakeep_meilisearch
+    '';
+    partOf = [ "docker-compose-karakeep-root.target" ];
+    wantedBy = [ "docker-compose-karakeep-root.target" ];
+  };
+
+  # Root service
+  # When started, this will automatically create all resources and start
+  # the containers. When stopped, this will teardown all resources.
+  systemd.targets."docker-compose-karakeep-root" = {
+    unitConfig = {
+      Description = "Root target generated by compose2nix.";
+    };
+    wantedBy = [ "multi-user.target" ];
+  };
+}
diff --git a/modules/nixos/orac/services.nix b/modules/nixos/orac/services.nix
index a64734e..6d24cc4 100644
--- a/modules/nixos/orac/services.nix
+++ b/modules/nixos/orac/services.nix
@@ -42,7 +42,7 @@
   };
 
   services.karakeep = {
-    enable = true;
+    enable = false;
     meilisearch.enable = true;
     browser.enable = true;
     environmentFile = "/etc/nixos/secrets/karakeep.env";
diff --git a/nixos/orac.nix b/nixos/orac.nix
index 0fd3479..4a620f3 100644
--- a/nixos/orac.nix
+++ b/nixos/orac.nix
@@ -7,6 +7,7 @@
     ../modules/adguard.nix
     ../modules/containers/docker/juicefs.nix
     ../modules/nixos/orac/restic.nix
+    ../modules/containers/docker/karakeep/docker-compose.nix
   ];
 
   networking.firewall = {