3 files changed, 18 insertions, 0 deletions
diff --git a/system/networking.nix b/system/networking.nix
index 3ba823e..377dc49 100644
--- a/system/networking.nix
+++ b/system/networking.nix
@@ -13,6 +13,7 @@ in {
     # firewall
     networking.firewall.enable = true;
     networking.firewall.allowedTCPPorts = [80 443];
+    networking.nftables.enable = true;
 
     # dns
     services.resolved.enable = true;
diff --git a/system/virt/default.nix b/system/virt/default.nix
index 18be703..d37b637 100644
--- a/system/virt/default.nix
+++ b/system/virt/default.nix
@@ -2,5 +2,6 @@
   imports = [
     ./docker.nix
     ./qemu.nix
+    ./waydroid.nix
   ];
 }
diff --git a/system/virt/waydroid.nix b/system/virt/waydroid.nix
new file mode 100644
index 0000000..a47b76d
--- /dev/null
+++ b/system/virt/waydroid.nix
@@ -0,0 +1,16 @@
+{
+  lib,
+  config,
+  pkgs,
+  ...
+}: let
+  inherit (lib) mkIf;
+  cfg = config.virt.waydroid;
+in {
+  config = mkIf cfg.enable {
+    virtualisation.waydroid = {
+      enable = true;
+      package = pkgs.waydroid-nftables;
+    };
+  };
+}