add incus

incus.nix

@@ -0,0 +1,15 @@
+{ config, pkgs, ... }:
+
+{
+  virtualisation.incus.enable = true;
+  networking = {
+    nftables.enable = true;
+    firewall.interfaces = {
+      incusbr0 = {
+        allowedTCPPorts = [ 53 67 ];
+        allowedUDPPorts = [ 53 67 ];
+      };
+    };
+  };
+}
+

master.nix

@@ -19,6 +19,7 @@ in
     ./user/stormwind/master.nix
     ./sshd.nix
     ./tailscale.nix
+    ./incus.nix
     ./auto-upgrade.nix
   ];
 

user/stormwind/master.nix

@@ -29,6 +29,7 @@
     extraGroups = [
       "networkmanager"
       "wheel"
+      "incus-admin"
     ];
     packages = with pkgs; [];