diff --git a/hosts/muon/configuration.nix b/hosts/muon/configuration.nix
index b9fd8aa..5f191da 100644
--- a/hosts/muon/configuration.nix
+++ b/hosts/muon/configuration.nix
@@ -30,9 +30,20 @@ in {
     "libsoup-2.74.3"
   ];
 
-  users.users.muon.extraGroups = ["docker"];
+  users.users.muon.extraGroups = ["docker" "libvirtd" "kvm"];
   virtualisation.docker.enable = true;
 
+  # Libvirt / QEMU (Windows 11 VM support)
+  virtualisation.libvirtd = {
+    enable = true;
+    qemu = {
+      # OVMF/UEFI firmware now ships by default with QEMU (option removed upstream)
+      swtpm.enable = true; # emulated TPM 2.0 (Windows 11 requirement)
+    };
+  };
+  programs.virt-manager.enable = true;
+  virtualisation.spiceUSBRedirection.enable = true; # camera/mic over SPICE
+
   # System
   mods.user.name = "muon";
   networking.hostName = cfg.user.name;