From e4c9be2374751a456f4753866bef337284edf6ac Mon Sep 17 00:00:00 2001
From: Mel <einebeere@gmail.com>
Date: Tue, 31 Dec 2024 01:04:32 +0100
Subject: Add incus bridge to trusted interfaces

Signed-off-by: Mel <einebeere@gmail.com>
---
 configuration/vm/incus.nix | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'configuration/vm/incus.nix')

diff --git a/configuration/vm/incus.nix b/configuration/vm/incus.nix
index 69c8465..02fcd77 100644
--- a/configuration/vm/incus.nix
+++ b/configuration/vm/incus.nix
@@ -48,6 +48,10 @@ let
   };
 in
 {
+  # needed so that the nixos firewall does not block
+  # DHCP+DNS requests from incus, and to prevent conflicts
+  # between the two firewalls.
+  networking.firewall.trustedInterfaces = [ "incusbr0" ];
   virtualisation.incus = {
     enable = true;
     package = incus;
-- 
cgit 1.4.1