nixconf/modules/nixos/containers/default.nix

{
  config,
  lib,
  pkgs,
  ...
}:
{
  config = lib.mkIf (!config.mtxyz.minimal) {
    environment.systemPackages = with pkgs; [
      podman-compose
    ];

    virtualisation.podman = {
      enable = true;
      dockerSocket.enable = true;
      dockerCompat = true;
      defaultNetwork.settings = {
        dns_enabled = true;
      };
    };

    systemd.services."user@".serviceConfig = {
      Delegate= "cpu cpuset io memory pids";
    };
  };
}