try an alternate pod approach

nixos/hosts/blueberry/default.nix

@@ -5,6 +5,8 @@
     ../../server.nix
     ../../features/systemd-boot.nix
     ../../features/podman.nix
+
+    ../../stacks/ps2.live
   ];
 
   networking.hostName = "blueberry";

nixos/stacks/ps2.live/default.nix

@@ -0,0 +1,5 @@
+{...}: {
+  imports = [
+    ./saerro.nix
+  ];
+}

nixos/stacks/ps2.live/saerro.nix

@@ -0,0 +1,10 @@
+{ ... }: let
+  podConfig = (import ../stack-utils.nix).pod "saerro" [
+    "saerro_postgres"
+    "saerro_maint"
+    "saerro_api"
+    "saerro_ws"
+  ] [ 8003 ];
+in podConfig // {
+  
+}

nixos/stacks/stack-utils.nix

@@ -0,0 +1,13 @@
+{
+  pod = { pkgs, ... }: podName: containers: ports: {
+    systemd.services."ensure-pod_${podName}" = let
+    in {
+      serviceConfig.Type = "oneshot";
+      wantedBy = map (x: "podman-${x}.service") containers;
+      script = ''
+        ${pkgs.podman}/bin/podman pod exists ${podName} || \\
+        ${pkgs.podman}/bin/podman pod create -n ${podName} ${map (x: "-p 0.0.0.0:${x}:${x}") portFlags}
+      '';
+    };
+  };
+}