about summary refs log tree commit diff
diff options
context:
space:
mode:
-rw-r--r--configuration/vm/incus.nix11
1 files changed, 7 insertions, 4 deletions
diff --git a/configuration/vm/incus.nix b/configuration/vm/incus.nix
index dd1990b..62293e8 100644
--- a/configuration/vm/incus.nix
+++ b/configuration/vm/incus.nix
@@ -56,10 +56,13 @@ let
   };
 in
 {
-  # needed so that the nixos firewall does not block
-  # DHCP+DNS requests from incus, and to prevent conflicts
-  # between the two firewalls.
-  networking.firewall.trustedInterfaces = [ "incusbr0" ];
+  networking.firewall = {
+    # needed so that the nixos firewall does not block
+    # DHCP+DNS requests from incus, and to prevent conflicts
+    # between the two firewalls.
+    trustedInterfaces = [ "incusbr0" ];
+    allowedTCPPorts = [ 23 ];
+  };
   # needed so inscus instances can connect to the proxy.
   boot.kernelModules = [ "br_netfilter" ];
   virtualisation.incus = {