create l2 bridge incusbr2

incus.nix

@@ -5,14 +5,13 @@
   networking = {
     nftables.enable = true;
     firewall = {
-      enable = true;
       trustedInterfaces = [ "incusbr1" ];
       filterForward = true;
 
       extraForwardRules = ''
         # if crusader tries to go to varian or truenas, BLOCK
         iifname "incusbr1" oifname "incusbr0" drop
-        iifname "incusbr1" oifname "enp4s0" ip daddr 192.168.0.0/16 drop
+        iifname "incusbr1" oifname "incusbr2" ip daddr 192.168.0.0/16 drop
       '';
 
       interfaces = {