Merge pull request #39055 from abbradar/reload-stop

firewall service: run stop commands in reload
2018-05-05 22:13:15 +02:00 · 2018-05-05 22:13:15 +02:00 · 76c8e5ea3b
commit 76c8e5ea3b
parent 1be056ca30 b81aa02800
1 changed files with 3 additions and 0 deletions
--- a/nixos/modules/services/networking/firewall.nix
+++ b/nixos/modules/services/networking/firewall.nix
@ -242,6 +242,9 @@ let

    # Don't allow traffic to leak out until the script has completed
    ip46tables -A INPUT -j nixos-drop
+
+    ${cfg.extraStopCommands}
+
    if ${startScript}; then
      ip46tables -D INPUT -j nixos-drop 2>/dev/null || true
    else