docker

modules/base/default.nix

@@ -1,5 +1,6 @@
 { ... }: {
   imports = [
+    ./docker.nix
     ./fish.nix
     ./git.nix
     ./home-manager.nix

modules/base/docker.nix

@@ -0,0 +1,22 @@
+{ ... }: {
+  # Docker is a utility to pack, ship and run any application as a lightweight
+  # container.
+  # https://nixos.wiki/wiki/Docker
+
+  virtualisation.docker = {
+    enable = true;
+    # Automatically `docker system prune` weekly
+    autoPrune.enable = true;
+  };
+
+  # Being a member of the docker group is effectively equivalent to being root,
+  # but without the annoyance of having to type your sudo password all the time.
+  users.extraGroups.docker.members = [ "caspervk" ];
+
+  # Persist docker volumes
+  environment.persistence."/nix/persist" = {
+    directories = [
+      # { directory = "/etc/NetworkManager/system-connections"; user = "root"; group = "root"; mode = "0700"; }
+    ];
+  };
+}

modules/base/users.nix

@@ -14,7 +14,7 @@
           "networkmanager"
           "wheel" # allows sudo
           "video" # allows controlling brightness
-          # todo: docker, systemd-journal, audio, input, power, nix ?
+          # todo: systemd-journal, audio, input, power, nix ?
         ];
         uid = 1000;
         openssh.authorizedKeys.keys = [