{ pkgs, ... }:
{
  virtualisation.podman = {
    enable = true;
    dockerCompat = true;
    defaultNetwork.settings.dns_enabled = true;
    extraPackages = with pkgs; [
      podman-compose
    ];
  };

  # required for podman DNS resolution
  networking.firewall.allowedUDPPorts = [ 53 ];
}