nixos/incus: handle networking.firewall.backend in firewall assertion

apparently one can enable the nftables backend without enabling nftables
This commit is contained in:
Adam C. Stephens
2025-12-01 09:40:11 -05:00
parent c6a2960070
commit 4884b1706f
+1 -1
View File
@@ -288,7 +288,7 @@ in
assertion =
!(
config.networking.firewall.enable
&& !config.networking.nftables.enable
&& !(config.networking.nftables.enable || config.networking.firewall.backend == "nftables")
&& config.virtualisation.incus.enable
);
message = "Incus on NixOS is unsupported using iptables. Set `networking.nftables.enable = true;`";