configurations/nixos/arma-reforger-tofu/default.nix

@@ -14,7 +14,7 @@ in
 {
   imports = [
     self.nixosModules.default
-    "${modulesPath}/virtualisation/lxc-container.nix"
+    # "${modulesPath}/virtualisation/lxc-container.nix"
   ];
 
   services.arma.enable = true;

modules/nixos/common/firewall.nix

@@ -1,17 +1,14 @@
 {
-  # lib,
+  lib,
-  # pkgs,
+  pkgs,
-  # config,
+  config,
   ...
 }:
 {
   networking.nftables = {
     enable = true;
-    tables = {
+    ruleset = ''
-      yggSsh = {
+      table inet filter {
-        name = "yggSsh";
-        family = "inet";
-        content = ''
         chain input {
           type filter hook input priority filter; policy accept;
           ct state related,established accept
@@ -30,8 +27,7 @@
         chain output {
           type filter hook output priority filter; policy accept;
         }
+      }
     '';
   };
-    };
-  };
 }

modules/nixos/common/incus.nix

@@ -1,17 +1,9 @@
 {
-  lib,
+
-  config,
-  pkgs,
-  ...
-}:
-{
-  options.iscontainer.enable = lib.mkEnableOption "iscontainer" // {
-    default = true;
-  };
-  config = lib.mkIf config.iscontainer.enable {
   systemd.network = {
     enable = true;
     networks."50-eth0" = {
+
       matchConfig.Name = "eth0";
       networkConfig = {
         DHCP = "ipv4";
@@ -22,10 +14,21 @@
   };
 
   networking = {
+    #   firewall = {
     firewall.enable = false;
+    #     interfaces = {
+    #       ygg0 = {
+    #         allowedTCPPorts = [ 22 ];
+    #         allowedUDPPorts = [ ];
+    #       };
+    #     };
+
+    #     # Default deny policy for all interfaces (including ygg0)
+    #     allowedTCPPorts = [ ];
+    #     allowedUDPPorts = [ ];
+    #   };
     dhcpcd.enable = false;
     useDHCP = false;
     useHostResolvConf = false;
   };
-  };
 }