{lib, pkgs, config, ...}: {
  imports = [
    ../options.nix
  ];

  virtualisation = lib.mkIf config.enableVirtualisation {
    libvirtd = {
      enable = true;
      qemu = {
        package = pkgs.qemu_kvm;
        runAsRoot = true;
        swtpm.enable = true;
      };
    };

    docker = {
      enable = true;
      # Use the rootless mode - run Docker daemon as non-root user
      rootless = {
        enable = true;
        setSocketVariable = true;
      };
    };
  };
}