{ virtualisation.docker.enable = true; users.users.may.extraGroups = [ "docker" ]; }