From ef1135d08a7b1624de1adf4ebd182ce3da72ac0d Mon Sep 17 00:00:00 2001
From: Roy Dumblauskas <roydumblauskas@gmail.com>
Date: Sat, 12 Sep 2026 12:46:38 -0500
Subject: [PATCH] trust incus interface

---
 configuration.nix | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/configuration.nix b/configuration.nix
index 9102551..6be1b68 100755
--- a/configuration.nix
+++ b/configuration.nix
@@ -224,10 +224,16 @@
   virtualisation.incus.enable = true;
 
   # Open ports in the firewall.
+  # Trust incus interface for VM stuff
   # networking.firewall.allowedTCPPorts = [ ... ];
   # networking.firewall.allowedUDPPorts = [ ... ];
-  networking.firewall.enable = true;
-  networking.nftables.enable = true;
+  networking = {
+    firewall = {
+      enable = true;
+      trustedInterfaces = [ "incusbr0" ];
+    };
+    nftable.enable = true;
+  };
 
   # INITIAL system version
   system.stateVersion = "24.11";