trust incus interface

2026-09-12 12:46:38 -05:00
parent 57a15e4114
commit ef1135d08a
1 changed files with 8 additions and 2 deletions
@@ -224,10 +224,16 @@
  virtualisation.incus.enable = true;

  # Open ports in the firewall.
+  # Trust incus interface for VM stuff
  # networking.firewall.allowedTCPPorts = [ ... ];
  # networking.firewall.allowedUDPPorts = [ ... ];
-  networking.firewall.enable = true;
-  networking.nftables.enable = true;
+  networking = {
+    firewall = {
+      enable = true;
+      trustedInterfaces = [ "incusbr0" ];
+    };
+    nftable.enable = true;
+  };

  # INITIAL system version
  system.stateVersion = "24.11";