a

modules/common/incus.nix

@@ -74,4 +74,7 @@
       };
     };
   };
+  networking.nftables.enable = true;
+  users.users.phoenix.extraGroups = ["incus-admin"];
+  networking.firewall.trustedInterfaces = [ "incusbr*" "internalbr0" ];
 }

modules/common/persisting.nix

@@ -1,31 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-{
-  persisting = {
-    enable = true;
-    
-    # Default directories to persist
-    directories = [
-      {
-        path = "/persist";
-        target = "/persist";
-        options = [ "defaults" "bind" ];
-      }
-      {
-        path = "/var/log";
-        target = "/var/log";
-        options = [ "defaults" "bind" ];
-      }
-      {
-        path = "/var/lib";
-        target = "/var/lib";
-        options = [ "defaults" "bind" ];
-      }
-    ];
-  };
-  
-  # Ensure persist directory exists
-  systemd.tmpfiles.rules = [
-    "d /persist 0755 root root - -"
-  ];
-}

modules/common/users.nix

@@ -21,7 +21,7 @@
 
   security.sudo.extraRules = [
     {
-      users = [ "phoenix" ];
+      users = [ "phoenix" "deploy" ];
       commands = [
         {
           command = "ALL";