From 03e5dbd72e1f4523b025d4eb16552f27c08c7829 Mon Sep 17 00:00:00 2001
From: Luke Granger-Brown <hg@lukegb.com>
Date: Mon, 7 Sep 2020 10:47:43 +0000
Subject: [PATCH] kusakabe: enable libvirtd

---
 ops/nixos/kusakabe/default.nix | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/ops/nixos/kusakabe/default.nix b/ops/nixos/kusakabe/default.nix
index 548aee3744..6fe7822907 100644
--- a/ops/nixos/kusakabe/default.nix
+++ b/ops/nixos/kusakabe/default.nix
@@ -59,19 +59,28 @@ in {
     useDHCP = false;
     defaultGateway = {
       address = "188.165.197.254";
-      interface = "eno1";
+      interface = "br-ext";
     };
     defaultGateway6 = {
       address = "2001:41d0:2:8eff:ff:ff:ff:ff";
-      interface = "eno1";
+      interface = "br-ext";
     };
-    interfaces.eno1 = {
+    interfaces.br-ext = {
       useDHCP = false;
       ipv4.addresses = [{ address = "188.165.197.49"; prefixLength = 24; }];
       ipv6.addresses = [{ address = "2001:41d0:2:8e31::1"; prefixLength = 64; }];
+      virtual = true;
     };
+    bridges.br-ext.interfaces = [ "eno1" ];
     firewall.allowPing = true;
   };
 
+  virtualisation.libvirtd = {
+    enable = true;
+    qemuRunAsRoot = false;
+    allowedBridges = [ "br-ext" ];
+  };
+  users.users.lukegb.extraGroups = lib.mkAfter [ "libvirtd" ];
+
   system.stateVersion = "20.03";
 }