jolheiser/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

nixos/wg-quick: use networking.firewall.package

Browse Source 
Use `nftables` if available.
This commit is contained in:
Naïm Favier 2022-10-14 10:32:02 +02:00
parent f9ffb73386
commit dc1e00bd8b
No known key found for this signature in database
GPG Key ID: 95AFCE8211908325
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
nixos/modules/services/networking/wg-quick.nix
View File

@ -273,7 +273,11 @@ let
after = [ "network.target" "network-online.target" ];
wantedBy = optional values.autostart "multi-user.target";
environment.DEVICE = name;
path = [ pkgs.kmod pkgs.wireguard-tools config.networking.resolvconf.package ];
path = [
pkgs.wireguard-tools
config.networking.firewall.package # iptables or nftables
config.networking.resolvconf.package # openresolv or systemd
];
serviceConfig = {
Type = "oneshot";
@ -281,7 +285,7 @@ let
};
script = ''
${optionalString (!config.boot.isContainer) "modprobe wireguard"}
${optionalString (!config.boot.isContainer) "${pkgs.kmod}/bin/modprobe wireguard"}
${optionalString (values.configFile != null) ''
cp ${values.configFile} ${configPath}
''}