From 4884b1706f3355303aa12113cd2ceadca7ae6fe9 Mon Sep 17 00:00:00 2001
From: "Adam C. Stephens" <adam@valkor.net>
Date: Mon, 1 Dec 2025 09:34:02 -0500
Subject: [PATCH] nixos/incus: handle networking.firewall.backend in firewall
 assertion

apparently one can enable the nftables backend without enabling nftables
---
 nixos/modules/virtualisation/incus.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/modules/virtualisation/incus.nix b/nixos/modules/virtualisation/incus.nix
index 47483b84872d..e1283afe8ad9 100644
--- a/nixos/modules/virtualisation/incus.nix
+++ b/nixos/modules/virtualisation/incus.nix
@@ -288,7 +288,7 @@ in
         assertion =
           !(
             config.networking.firewall.enable
-            && !config.networking.nftables.enable
+            && !(config.networking.nftables.enable || config.networking.firewall.backend == "nftables")
             && config.virtualisation.incus.enable
           );
         message = "Incus on NixOS is unsupported using iptables. Set `networking.nftables.enable = true;`";