Add incus (by default disabled)

configuration.nix

@@ -81,7 +81,7 @@
   users.users.rothe = {
     isNormalUser = true;
     description = "rothe";
-    extraGroups = [ "networkmanager" "wheel" "video" "scanner" "lp" "libvirtd"];
+    extraGroups = [ "networkmanager" "wheel" "video" "scanner" "lp" "incus-admin"];
     shell = pkgs.fish;
     packages = with pkgs; [
       chromium
@@ -176,7 +176,6 @@
         enableSSHSupport = true;
     };
     light.enable = true;
-    virt-manager.enable = true;
   };
   # List services that you want to enable:
   services.resolved = {
@@ -214,10 +213,10 @@
     roboto-mono
   ];
 
-  networking.firewall = {
+  networking.nftables = {
     enable = true;
-    allowedTCPPorts = [ ];
   };
+  networking.firewall.trustedInterfaces = [ "incusbr0" ];
   # This value determines the NixOS release from which the default
   # settings for stateful data, like file locations and database versions
   # on your system were taken. It‘s perfectly fine and recommended to leave
@@ -227,8 +226,7 @@
   system.stateVersion = "23.05"; # Did you read the comment?
 
   virtualisation = {
-    libvirtd.enable = true;
-    podman.enable = true;
+    incus.enable = false;
   };
 
   programs.steam = {