fix: trust libvirt interfaces

2025-07-16 19:37:24 +03:00 · 2025-07-16 19:37:24 +03:00 · 16af5ab8aa
commit 16af5ab8aa
parent deebcd7140
2 changed files with 7 additions and 0 deletions
--- a/hosts/andromedae/default.nix
+++ b/hosts/andromedae/default.nix
@ -149,6 +149,11 @@ in
    useRoutingFeatures = "client";
  };

+  networking.firewall.trustedInterfaces = [
+    "virbr-lan"
+    "virbr-wan"
+  ];
+
  # Mesa from unstable channel
  hardware.graphics.package = pkgs.mesaUnstable;
  hardware.graphics.package32 = pkgs.mesaUnstablei686;
--- a/modules/nixos/virtualisation/virtualisation.nix
+++ b/modules/nixos/virtualisation/virtualisation.nix
@ -110,6 +110,8 @@ in
      ];
    };

+    networking.firewall.trustedInterfaces = mkIf cfg.libvirt [ "virbr0" ];
+
    security.unprivilegedUsernsClone = true;

    persist.state.directories = [