# https://wiki.nixos.org/wiki/Incus
{ flake, ... }:
let
  networkName = "incusbr0";

  # Problems? 
  # 1. Disable the service
  # 2. Reset with: `sudo rm -rf /var/lib/lx* /var/lib/incus/`
  # 3. Reboot
  # 4. Then re-enable service
  #
  # Getting `user-1000` related nonsense errors?
  # Just use the default project: `incus project switch default`
  preseedConfig = {
    networks = [
      {
        name = networkName;
        type = "bridge";
      }
    ];
    profiles = [
      {
        name = "default";
        devices = {
          eth0 = {
            name = "eth0";
            network = networkName;
            type = "nic";
          };
          root = {
            path = "/";
            pool = "default";
            type = "disk";
          };
        };
      }
    ];
    storage_pools = [
      {
        name = "default";
        driver = "dir";
        config = {
          source = "/var/lib/incus/storage-pools/default";
        };
      }
    ];
  };
in
{
  virtualisation.incus = {
    enable = true;
    preseed = preseedConfig;
  };

  users.users.${flake.config.me.username} = {
    extraGroups = [ "incus" "incus-admin" ];
  };

  networking.nftables.enable = true;

  networking.firewall.trustedInterfaces = [ networkName ];
}