summaryrefslogtreecommitdiff
path: root/configuration/vm
diff options
context:
space:
mode:
Diffstat (limited to 'configuration/vm')
-rw-r--r--configuration/vm/incus.nix11
1 files changed, 7 insertions, 4 deletions
diff --git a/configuration/vm/incus.nix b/configuration/vm/incus.nix
index dd1990b..62293e8 100644
--- a/configuration/vm/incus.nix
+++ b/configuration/vm/incus.nix
@@ -56,10 +56,13 @@ let
};
in
{
- # needed so that the nixos firewall does not block
- # DHCP+DNS requests from incus, and to prevent conflicts
- # between the two firewalls.
- networking.firewall.trustedInterfaces = [ "incusbr0" ];
+ networking.firewall = {
+ # needed so that the nixos firewall does not block
+ # DHCP+DNS requests from incus, and to prevent conflicts
+ # between the two firewalls.
+ trustedInterfaces = [ "incusbr0" ];
+ allowedTCPPorts = [ 23 ];
+ };
# needed so inscus instances can connect to the proxy.
boot.kernelModules = [ "br_netfilter" ];
virtualisation.incus = {