puter/hosts/headful/work/docker.nix

{config, ...}: {
  virtualisation.docker.enable = true;

  users.groups.docker.members = config.users.normalUsers;
}