{ pkgs, ... }:
{
  virtualisation = {
    libvirtd = {
     enable = true;
     qemu = {
        package = pkgs.qemu_kvm;
        swtpm.enable = true;
      };
    };

    docker = {
      enable = true;
      extraPackages = with pkgs; [ docker-compose ];
    };

    containerd.enable = true;
  };

  programs.virt-manager.enable = true;
#  networking.firewall.allowedTCPPorts = [ 16509 ]; # NAT

  users.users.adam.extraGroups = [ "libvirtd" "kvm" "docker" ];
}