services/forgejo-runner: init

hosts/ude/default.nix

@@ -26,7 +26,10 @@
       };
 
       settei.incus.enable = true;
-      virtualisation.podman.enable = true;
+      virtualisation.podman = {
+        enable = true;
+        defaultNetwork.settings.dns_enabled = true;
+      };
 
       services.nginx = {
         enable = true;

services/forgejo-runner.nix

@@ -25,6 +25,13 @@
             ];
           };
         };
+
+        virtualisation.podman = {
+          enable = true;
+          defaultNetwork.settings.dns_enabled = true;
+        };
+
+        networking.firewall.trustedInterfaces = [ "br-+" ];
       };
   };
 }