summary refs log tree commit diff
diff options
context:
space:
mode:
authorMel <einebeere@gmail.com>2024-12-31 01:04:32 +0100
committerMel <einebeere@gmail.com>2024-12-31 01:04:32 +0100
commite4c9be2374751a456f4753866bef337284edf6ac (patch)
treebfb254046768aae18c3dc92d06d09fa8e6709026
parent2d663d301add982bf2ea9b1d576daa025eec4c3a (diff)
downloadspecimen-e4c9be2374751a456f4753866bef337284edf6ac.tar.zst
specimen-e4c9be2374751a456f4753866bef337284edf6ac.zip
Add incus bridge to trusted interfaces
Signed-off-by: Mel <einebeere@gmail.com>
-rw-r--r--configuration/vm/incus.nix4
1 files changed, 4 insertions, 0 deletions
diff --git a/configuration/vm/incus.nix b/configuration/vm/incus.nix
index 69c8465..02fcd77 100644
--- a/configuration/vm/incus.nix
+++ b/configuration/vm/incus.nix
@@ -48,6 +48,10 @@ let
   };
 in
 {
+  # needed so that the nixos firewall does not block
+  # DHCP+DNS requests from incus, and to prevent conflicts
+  # between the two firewalls.
+  networking.firewall.trustedInterfaces = [ "incusbr0" ];
   virtualisation.incus = {
     enable = true;
     package = incus;