nix/nixos/desktop/cage.nix

{ pkgs, ... }:
{
  imports = [
    ./default.nix
    ../hardware/network.nix
  ];

  services.cage = {
    enable = true;
    extraArguments = [
      "-d"
    ];
  };
}