Update a lot of options, simplify variables, replace options with tags

modules/system/services/general/libvirtd/default.nix

@@ -14,13 +14,15 @@
       };
     };
 
-    programs.virt-manager.enable = true;
-
-    networking.firewall.trustedInterfaces = [
-      "virbr0"
-      "virbr1"
+    # Isolate devices into more IOMMU groups
+    boot.kernelParams = [
+      "pcie_acs_override=downstream,multifunction"
+      "pci=routeirq"
     ];
 
+    programs.virt-manager.enable = true;
+
+    # Allow looking glass to be accessed by users
     systemd.tmpfiles.rules = [ "f /dev/shm/looking-glass 0660 - libvirtd -" ];
 
     environment.persistence."/persist".directories = [ "/var/lib/libvirt" ];