nix/nixos/hosts/framework-server/docker.nix

{ inputs, pkgs, ... }: {
    boot.kernel.sysctl = { 
      "fs.inotify.max_user_watches" = 10485760;
      "fs.inotify.max_user_instances" = 1024;
    };

    virtualisation.docker = {
        enable = true;
        enableOnBoot = true;
        autoPrune.enable = true;
        autoPrune.dates = "weekly";
        storageDriver = "btrfs";
        liveRestore = true;
    };

    environment.systemPackages = with pkgs; [ 
      docker-compose 
      ctop
      inputs.compose2nix.packages.x86_64-linux.default
    ];

    networking.firewall.allowedUDPPorts = [
      3478  # Headscale DERP UDP 
      10000 # Jitsi 
    ];
    networking.firewall.allowedTCPPorts = [
      80    # HTTP 
      443   # HTTPS
      42420 # Vintage Story 
      25565 # Minecraft 
      1443  # Headscale DERP 
      4443  # Jitsi 
    ];
}