···

       
410
       
 
       
      etc."qemu/bridge.conf".text = lib.concatMapStringsSep "\n" (e: "allow ${e}") cfg.allowedBridges;

     

       
411
       
 
       
      systemPackages = with pkgs; [

     

       
412
       
 
       
        libressl.nc

     

       
413
       
-
       
        iptables

     

       
414
       
 
       
        cfg.package

     

       
415
       
 
       
        cfg.qemu.package

     

       
416
       
 
       
      ];

     

···

       
410
       
 
       
      etc."qemu/bridge.conf".text = lib.concatMapStringsSep "\n" (e: "allow ${e}") cfg.allowedBridges;

     

       
411
       
 
       
      systemPackages = with pkgs; [

     

       
412
       
 
       
        libressl.nc

     

       
413
       
+
       
        config.networking.firewall.package

     

       
414
       
 
       
        cfg.package

     

       
415
       
 
       
        cfg.qemu.package

     

       
416
       
 
       
      ];