nixos-configs/home/vinzenz/.config/containers/policy.json

{
    "default": [
        {
            "type": "reject"
        }
    ],
    "transports": {
        "docker-daemon": {
            "": [
                {
                    "type": "insecureAcceptAnything"
                }
            ]
        },
        "docker": {
            "docker.io/library/debian": [
                {
                    "type": "insecureAcceptAnything"
                }
            ]
        }
    }
}