{ pkgs, ... }:
{
  virtualisation.libvirtd = {
    enable = true;
    qemu = {
      package = pkgs.qemu_kvm;
      runAsRoot = true;
      swtpm.enable = true;
      ovmf = {
        enable = true;
        packages = [(pkgs.OVMF.override {
          secureBoot = true;
          tpmSupport = true;
        }).fd];
      };
    };
  };

  virtualisation.spiceUSBRedirection.enable = true;
  boot.kernelModules = [ "kvm-amd" ];

  environment.systemPackages = with pkgs; [
    spice-gtk
  ];
}