virtualisation.restrictNetwork

If this option is enabled, the guest will be isolated, i.e. it will not be able to contact the host and no guest IP packets will be routed over the host to the outside. This option does not affect any explicitly set forwarding rules.

Type
boolean
Default
false
Example
true
Declared
<nixpkgs/nixos/modules/virtualisation/qemu-vm.nix>