{ lib, ... }:
{
  virtualisation.docker = {
    enable = true;
    storageDriver = "overlay2";
    enableOnBoot = false;
    liveRestore = true;
    enableNvidia = lib.mkForce true;

    daemon.settings = {
      default-runtime = "nvidia";
      experimental = true;
      iptables = false;
    };

    autoPrune = {
      enable = true;
      dates = "daily";
    };

    rootless = {
      enable = false;
      setSocketVariable = true;

      daemon.settings = {
        default-runtime = "nvidia";
        experimental = true;
        iptables = false;
      };
    };
  };
}