{
  virtualisation = {
    containers.enable = true;
    podman = {
      enable = true;
      dockerCompat = true;
    };
    oci-containers.containers = {
      dockerproxy = {
        image = "ghcr.io/tecnativa/docker-socket-proxy:latest";
        volumes = [ "/var/run/podman/podman.sock:/var/run/docker.sock:ro" ];
        environment = {
          CONTAINERS = "1";
          POST = "0";
        };
        extraOptions = [
          "--pull=newer"
          "--network=www"
        ];
      };
    };
  };
}