anchor.diff:      matej = {
         uid = 499;
         createHome = true;
  -      extraGroups = [ "wheel" "networkmanager" ];
  +      extraGroups = [ "wheel" "networkmanager" "docker" "libvirtd" "vboxusers" ];
         group = "users";
         home = "/home/matej";
         shell = "/run/current-system/sw/bin/zsh";
  
positive.code:           } ];
        };
      };
      #kernelPackages = pkgs.linuxPackages_3_12;
      blacklistedKernelModules = [ "snd_pcsp" "pcspkr" ];
  #    extraModprobeConfig = ''
  #      options sdhci debug_quirks=0x4670
  
negative.code:       SystemdService = "connman-vpn.service";
      };
    };
  
  
      systemd.services."my-post-suspend" =
        { description = "Post-Suspend Actions";
          wantedBy = [ "suspend.target" ];
          after = [ "post-sleep.service" ];
          script =
            ''
              sleep 3 && systemctl restart docker
            '';
          serviceConfig.Type = "simple";
        };
  
    systemd.services.docker.preStart = "${pkgs.nettools}/bin/ifconfig docker0 down && ${pkgs.bridge_utils}/sbin/brctl delbr docker0 || true";
  */
  
    nix.trustedBinaryCaches = [
      "https://hydra.nixos.org/"
      "https://cache.nixos.org/"
    ];
  
    nix.binaryCaches = [
      "https://hydra.nixos.org/"
      "https://cache.nixos.org/"
    ];
  
     virtualisation.docker.enable = false;
     virtualisation.docker.socketActivation = false;
     virtualisation.docker.extraOptions = ''
     --ip=127.0.0.1 --dns=8.8.8.8
     '';
  
      systemd.services.keylogger = {
        description = "keylogger";
        wantedBy = [ "multi-user.target" ];
        serviceConfig = {
          ExecStart = "${pkgs.logkeys}/bin/logkeys -s";
          ExecStop = "${pkgs.logkeys}/bin/logkeys -k";
          Type = "forking";
        };
      };
  
    #virtualisation.libvirtd = {
    #  enable = true;
    #  enableKVM = true;
    #};
  
  }
  