gram: nux

> ./module/incus.nix

# https://wiki.nixos.org/wiki/Incus
{edge, name, ...}:
{ virtualisation.incus = {
    enable = true;
    package = edge.incus;
    preseed.networks = [
      { name = "incusbr0"; type = "bridge";
        config = {
          "ipv4.address" = "10.0.100.1/24";
          "ipv4.nat" = "true";
        }; }
  ]; };
  networking.nftables.enable = true;
  networking.firewall.trustedInterfaces = [ "incusbr0" ];
  networking.nftables.flushRuleset = false;
  users.users.${name}.extraGroups = ["incus-admin"];

  # networking.firewall.interfaces.incusbr0 = {
  #   allowedTCPPorts = [ 53 67 ];
  #   allowedUDPPorts = [ 53 67 ];
  # };
}