{ ... }: {
  virtualisation.docker.enable = true;
  users.users.andrew.extraGroups = [ "docker" ];
}