From fc5c79b125b878599890b84c4caf2292420c0ee8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Nikodem=20Rabuli=C5=84ski?= <nikodem@rabulinski.com>
Date: Sun, 22 Jun 2025 23:00:09 +0200
Subject: [PATCH] modules/system/sane-defaults: enable cgroups

---
 modules/system/sane-defaults.nix | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/modules/system/sane-defaults.nix b/modules/system/sane-defaults.nix
index 2df8471..cad117a 100644
--- a/modules/system/sane-defaults.nix
+++ b/modules/system/sane-defaults.nix
@@ -108,6 +108,15 @@ let
     boot.kernel.sysctl."kernel.yama.ptrace_scope" = 0;
 
     settei.user.config.services.ssh-agent.enable = true;
+
+    nix.settings = {
+      experimental-features = [ "cgroups" ];
+      use-cgroups = true;
+    };
+    systemd.services.nix-daemon.serviceConfig = {
+      Delegate = "yes";
+      DelegateSubgroup = "supervisor";
+    };
   };
 
   darwinConfig = lib.optionalAttrs (!isLinux) {