From d41b386aaf7172fb2d220399e5975269ab79a8cb Mon Sep 17 00:00:00 2001
From: Alan Pearce
Date: Thu, 4 Apr 2024 17:57:58 +0200
Subject: Enable rootless docker

---
 system/prefect.nix                  |  1 +
 system/settings/programs/docker.nix | 23 +++++++++++++++++++++++
 2 files changed, 24 insertions(+)
 create mode 100644 system/settings/programs/docker.nix

diff --git a/system/prefect.nix b/system/prefect.nix
index e38f6533..86406e5a 100644
--- a/system/prefect.nix
+++ b/system/prefect.nix
@@ -27,6 +27,7 @@
     ./settings/programs/gnupg.nix
     ./settings/programs/kde.nix
     ./settings/programs/shell.nix
+    ./settings/programs/docker.nix
     ./settings/gaming.nix
   ];
 
diff --git a/system/settings/programs/docker.nix b/system/settings/programs/docker.nix
new file mode 100644
index 00000000..d7c6a88e
--- /dev/null
+++ b/system/settings/programs/docker.nix
@@ -0,0 +1,23 @@
+{ ... }: {
+  virtualisation.docker = {
+    enable = false;
+    storageDriver = "overlay2";
+    rootless = {
+      enable = true;
+      setSocketVariable = true;
+      daemon.settings = {
+        fixed-cidr-v6 = "fd0c::/80";
+        ipv6 = true;
+        dns = [
+          "1.0.0.1"
+          "1.1.1.1"
+        ];
+      };
+    };
+  };
+  # TODO: autoPrune doesn't affect rootless
+  # systemd.timers.docker-prune.timerConfig = {
+  #   Persistent = true;
+  #   RandomizedDelaySec = 1800;
+  # };
+}
-- 
cgit 1.4.1