47 lines
966 B
Nix
47 lines
966 B
Nix
{ config, lib, pkgs, ... }:
|
||
|
||
with lib;
|
||
|
||
{
|
||
|
||
###### interface
|
||
|
||
options = {
|
||
|
||
services.oidentd.enable = mkOption {
|
||
default = false;
|
||
type = types.bool;
|
||
description = ''
|
||
Whether to enable ‘oidentd’, an implementation of the Ident
|
||
protocol (RFC 1413). It allows remote systems to identify the
|
||
name of the user associated with a TCP connection.
|
||
'';
|
||
};
|
||
|
||
};
|
||
|
||
|
||
###### implementation
|
||
|
||
config = mkIf config.services.oidentd.enable {
|
||
|
||
jobs.oidentd =
|
||
{ startOn = "started network-interfaces";
|
||
daemonType = "fork";
|
||
exec = "${pkgs.oidentd}/sbin/oidentd -u oidentd -g nogroup" +
|
||
optionalString config.networking.enableIPv6 " -a ::"
|
||
;
|
||
};
|
||
|
||
users.extraUsers.oidentd = {
|
||
description = "Ident Protocol daemon user";
|
||
group = "oidentd";
|
||
uid = config.ids.uids.oidentd;
|
||
};
|
||
|
||
users.extraGroups.oidentd.gid = config.ids.gids.oidentd;
|
||
|
||
};
|
||
|
||
}
|