Add Incus to the server services, put Kitty on its own router for an extra public IP

modules/system/services/server/default.nix

@@ -4,6 +4,7 @@
     ./cfdyndns
     ./forgejo
     ./icecast
+    ./incus
     ./jellyfin
     ./mailserver
     ./mastodon

modules/system/services/server/incus/default.nix

@@ -0,0 +1,16 @@
+{ config, lib, pkgs, ... }:
+{
+  config = lib.mkIf config.virtualisation.incus.enable {
+    networking.firewall.interfaces.incusbr0 = let
+      ports = [
+        53
+        67
+      ];
+    in {
+      allowedTCPPorts = ports;
+      allowedUDPPorts = ports;
+    };
+
+    environment.persistence."/persist".directories = [ "/var/lib/incus" ];
+  };
+}

modules/system/users/main/default.nix

@@ -36,6 +36,7 @@
       "libvirtd"
       "qemu-libvirtd"
 
+      "incus-admin"
       "minecraft"
       "nfsShare"
       "nginx"