{
  virtualisation.incus.enable = true;

  networking.nftables.enable = true;
}