{
  virtualisation = {
    containers.enable = true;
    podman.enable = true;
    oci-containers.containers = {
      docker_dind = {
        image = "docker.io/library/docker:dind";
        cmd = [
          "dockerd"
          "-H"
          "tcp://0.0.0.0:2375"
          "--tls=false"
        ];
        extraOptions = [
          "--pull=newer"
          "--privileged"
          "--network=www"
        ];
      };
    };
  };
}