{ lib, ... }:

with lib;

{
  virtualisation.docker = {
    enable = true;

    daemon.settings = {
      group = mkForce "users";
    };

    autoPrune = {
      enable = true;
      dates = "weekly";
    };
  };

  hardware.nvidia-container-toolkit.enable = true;

  systemd.sockets."docker" = {
    socketConfig = {
      SocketGroup = mkForce "users";
    };
  };
}