create l2 bridge incusbr2

2026-01-26 15:36:02 +01:00
parent 949f8cf77a
commit 62307984f5
2 changed files with 52 additions and 37 deletions
--- a/incus.nix
+++ b/incus.nix
@@ -5,14 +5,13 @@
  networking = {
    nftables.enable = true;
    firewall = {
-      enable = true;
      trustedInterfaces = [ "incusbr1" ];
      filterForward = true;

      extraForwardRules = ''
        # if crusader tries to go to varian or truenas, BLOCK
        iifname "incusbr1" oifname "incusbr0" drop
-        iifname "incusbr1" oifname "enp4s0" ip daddr 192.168.0.0/16 drop
+        iifname "incusbr1" oifname "incusbr2" ip daddr 192.168.0.0/16 drop
      '';

      interfaces = {