{ pkgs, ... }:

{
  virtualisation = {
    containers.enable = true;
    podman = {
      enable = true;
      dockerCompat = true;
      defaultNetwork.settings.dns_enabled = true;
    };
    libvirtd = {
      enable = true;
      qemu = {
        package = pkgs.qemu_kvm;
        runAsRoot = true;
        swtpm.enable = true;
      };
    };
    incus = {
      enable = true;
      ui.enable = true;
    };
    spiceUSBRedirection.enable = true;
  };

  networking.nftables.enable = true;

  programs.virt-manager.enable = true;

  users.users.anish.extraGroups = [
    "libvirtd"
    "kvm"
    "incus-admin"
  ];

  environment.systemPackages = with pkgs; [
    # Container management & inspection
    dive
    podman-tui
    docker-compose
    podman-compose
    lazydocker
    ctop
    skopeo
    buildah

    # Distro isolation & integration
    distrobox
    boxbuddy

    # Virtual machines & tools
    qemu_kvm
    virt-manager
    virt-viewer
    spice
    spice-gtk
    spice-protocol
    virtio-win
    win-spice
    quickemu
    quickgui
    vagrant
  ];
}