From b00cadd7a37250a1fd71b6d81d90c191fe74ac23 Mon Sep 17 00:00:00 2001
From: k3t <k3t@k3t.dev>
Date: Sat, 8 Aug 2026 14:23:43 +0000
Subject: [PATCH] update waydroid.nix & firewall.nix

---
 modules/gui/services/waydroid.nix |  1 +
 modules/sys/firewall.nix          | 27 ++++++++++++++++-----------
 2 files changed, 17 insertions(+), 11 deletions(-)

diff --git a/modules/gui/services/waydroid.nix b/modules/gui/services/waydroid.nix
index 5ec26c5..3e1003b 100644
--- a/modules/gui/services/waydroid.nix
+++ b/modules/gui/services/waydroid.nix
@@ -3,6 +3,7 @@
 {
   virtualisation.waydroid = {
     enable = true;
+    package = pkgs.waydroid-nftables;
   };
   environment.systemPackages = [ pkgs.wl-clipboard ];
 }
diff --git a/modules/sys/firewall.nix b/modules/sys/firewall.nix
index ba718e2..d5f1eaa 100644
--- a/modules/sys/firewall.nix
+++ b/modules/sys/firewall.nix
@@ -1,13 +1,18 @@
 {
-  networking.firewall = {
-    enable = true;
-    allowedTCPPorts = [ 4713 ];
-    #allowedUDPPorts = [ 80 443 ];
-    allowedTCPPortRanges = [
-      { from = 8000; to = 9000; }
-    ];
-    allowedUDPPortRanges = [
-      { from = 8000; to = 9000; }
-    ];
+  networking = {
+    nftables = {
+      enable = true;
+    };
+    firewall = {
+      enable = true;
+      allowedTCPPorts = [ 4713 ];
+      #allowedUDPPorts = [ 80 443 ];
+      allowedTCPPortRanges = [
+        { from = 8000; to = 9000; }
+      ];
+      allowedUDPPortRanges = [
+        { from = 8000; to = 9000; }
+      ];
+    };
   };
-}
\ No newline at end of file
+}