From 87eb1bcb723c1f433003b22a7dd188dc61b1f0e4 Mon Sep 17 00:00:00 2001
From: aaron <aaron@0x29a.ch>
Date: Fri, 2 Oct 2026 09:25:40 +0200
Subject: [PATCH] refactor(docker): rootless only

Drops the root daemon and the root-equivalent docker group; the daemon settings now apply to the rootless daemon. compose ships with the docker package.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 modules/nixos/docker.nix | 20 +++-----------------
 1 file changed, 3 insertions(+), 17 deletions(-)

diff --git a/modules/nixos/docker.nix b/modules/nixos/docker.nix
index 1307a73..c06235c 100644
--- a/modules/nixos/docker.nix
+++ b/modules/nixos/docker.nix
@@ -1,12 +1,8 @@
-{ pkgs, ... }:
-
 {
-  # add docker group to user
-  users.users.aaron.extraGroups = [ "docker" ];
-
-  virtualisation.docker = {
+  # rootless only: no root daemon and no root-equivalent docker group
+  virtualisation.docker.rootless = {
     enable = true;
-    # Customize Docker daemon settings
+    setSocketVariable = true;
     daemon.settings = {
       dns = [
         "1.1.1.1"
@@ -14,16 +10,6 @@
       ];
       log-driver = "journald";
       registry-mirrors = [ "https://mirror.gcr.io" ];
-      storage-driver = "overlay2";
     };
-    # Use the rootless mode
-    rootless = {
-      enable = true;
-      setSocketVariable = true;
-    };
-    # Install docker-compose
-    extraPackages = with pkgs; [
-      docker-compose
-    ];
   };
 }