diff --git a/configuration.nix b/configuration.nix
index 637179c..b9765eb 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -160,7 +160,9 @@
 		};
 	in {
 		illustris = {
-			extraGroups = [ "adb" "dialout" "docker" "libvirtd" "plugdev" "tty" "wheel" ];
+			extraGroups = [
+				"adb" "dialout" "libvirtd" "plugdev" "tty" "wheel"
+			] ++ lib.optionals config.virtualisation.docker.enable [ "docker" ];
 			isNormalUser = true;
 			openssh.authorizedKeys.keyFiles = [ ghKeys ];
 		};
@@ -169,7 +171,7 @@
 
 	virtualisation = {
 		docker = {
-			enable = true;
+			enable = false;
 			enableNvidia = true;
 			# extraOptions = "--storage-opt dm.basesize=20G";
 			storageDriver = "zfs";
diff --git a/flake.lock b/flake.lock
index 1a150c5..f97b556 100644
--- a/flake.lock
+++ b/flake.lock
@@ -7,11 +7,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1692763155,
-        "narHash": "sha256-qMrGKZ8c/q/mHO3ZdrcBPwiVVXPLLgXjY98Ejqb5kAA=",
+        "lastModified": 1697410455,
+        "narHash": "sha256-jCs/ffIP3tUPN7HWWuae4BB8+haAw2NI02z5BQvWMGM=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "6a20e40acaebf067da682661aa67da8b36812606",
+        "rev": "78125bc681d12364cb65524eaa887354134053d0",
         "type": "github"
       },
       "original": {
@@ -28,11 +28,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1692448348,
-        "narHash": "sha256-/Wy9Bzw59A5OD82S9dWHshg+wiSzJNh95hPXNhO5K7E=",
+        "lastModified": 1696635169,
+        "narHash": "sha256-gOjLe7maQ58erN/9ykb6d2ePAU7QAT1D8u7qin9gt+c=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "bdb5bcad01ff7332fdcf4b128211e81905113f84",
+        "rev": "b2a2133c9a0b0aa4d06d72b5891275f263ee08df",
         "type": "github"
       },
       "original": {
@@ -49,11 +49,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1693132095,
-        "narHash": "sha256-MZzCHu0IunZV8gBjg5eaobA5a9o0ERNwh39GRJvJxeo=",
+        "lastModified": 1696731079,
+        "narHash": "sha256-77dnvNitOw2Ojsh1BoDsHyoiQkE03wy6IIuGm/wyrK8=",
         "owner": "illustris",
         "repo": "flake",
-        "rev": "0a57fc904aa38b1fdcfa15699e4a6eee58cbc683",
+        "rev": "099fe9635bedf12e758eff682efcd3f56881b65a",
         "type": "github"
       },
       "original": {
@@ -84,11 +84,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1692913444,
-        "narHash": "sha256-1SvMQm2DwofNxXVtNWWtIcTh7GctEVrS/Xel/mdc6iY=",
+        "lastModified": 1697059129,
+        "narHash": "sha256-9NJcFF9CEYPvHJ5ckE8kvINvI84SZZ87PvqMbH6pro0=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "18324978d632ffc55ef1d928e81630c620f4f447",
+        "rev": "5e4c2ada4fcd54b99d56d7bd62f384511a7e2593",
         "type": "github"
       },
       "original": {
diff --git a/hardware-configuration.nix b/hardware-configuration.nix
index 61def4d..cd371cf 100644
--- a/hardware-configuration.nix
+++ b/hardware-configuration.nix
@@ -14,6 +14,7 @@
 			kernelModules = [ ];
 		};
 		kernelModules = [ "v4l2loopback" ];
+		kernelParams = [ "mitigations=off" ];
 		extraModulePackages = [ config.boot.kernelPackages.v4l2loopback ];
 	};