service changes

modules/nixos/services/service-docker.ulu.nix

@@ -3,6 +3,12 @@
   flake.nixosModules.service-docker =
     { ... }:
     {
-      virtualisation.docker.enable = true;
+      # Rootless: the daemon runs as the user, so access to it isn't root
+      # (membership in the `docker` group of a rootful daemon would be).
+      # setSocketVariable points DOCKER_HOST at the user's socket.
+      virtualisation.docker.rootless = {
+        enable = true;
+        setSocketVariable = true;
+      };
     };
 }