From d8f20b93914e59d230fb4cc111e7f872fac52afc Mon Sep 17 00:00:00 2001
From: Christian <thechristiansoltermann@gmail.com>
Date: Sun, 7 Jun 2026 13:46:46 -0500
Subject: Expose Windows VM RDP to LAN via port forwarding

---
 hosts/desktop/configuration.nix | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

(limited to 'hosts')

diff --git a/hosts/desktop/configuration.nix b/hosts/desktop/configuration.nix
index 8d2da6f..f43e993 100644
--- a/hosts/desktop/configuration.nix
+++ b/hosts/desktop/configuration.nix
@@ -37,5 +37,20 @@
 
   services.xserver.videoDrivers = [ "amdgpu" ];
 
+  networking.firewall.allowedTCPPorts = [ 3389 ];
+  networking.firewall.trustedInterfaces = [ "virbr0" ];
+  networking.nat = {
+    enable = true;
+    externalInterface = "wlan0";
+    internalInterfaces = [ "virbr0" ];
+    forwardPorts = [
+      {
+        destination = "192.168.111.111:3389";
+        proto = "tcp";
+        sourcePort = 3389;
+      }
+    ];
+  };
+
   system.stateVersion = "25.11";
 }
-- 
cgit v1.2.3