{...}: { virtualisation.docker = { enable = true; autoPrune.enable = true; }; virtualisation.oci-containers = { backend = "docker"; }; users.extraGroups.docker.members = ["mun"]; }