nix-conf/modules/nixos/networking/default.nix

_: {
  networking = {
    hostname = "bridge";

    networkmanager = {
      enable = true;
      unmanaged = ["virbr0" "docker0"];
    };

    nftables.enable = true;

    firewall = {
      allowedTCPPorts = [80 443];
      trustedInterfaces = ["incusbr0" "virbr0"];
    };

    extraHosts = ''
      185.199.108.133 raw.githubusercontent.com
    '';
    nameservers = ["1.1.1.1" "9.9.9.9"];
    bridges = {incusbr0.interfaces = [];};
  };
}