refactor: fix several minor bugs and potential security issues

features/docker.nix

@@ -1,4 +1,15 @@
 { _, ... }:
 {
-  virtualisation.docker.enable = true;
+  virtualisation.docker = {
+    enable = true;
+
+    rootless = {
+      enable = true;
+      setSocketVariable = true;
+
+      daemon.settings = {
+        data-root = "$XDG_DATA_HOME/docker";
+      };
+    };
+  };
 }

features/sudo.nix

@@ -0,0 +1,7 @@
+{ _, ... }:
+{
+  security.sudo = {
+    enable = true;
+    wheelNeedsPassword = true;
+  };
+}