JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

nftables: Warn about correct firewall setting

Browse Source 
services.networking.firewall might have existed during import of this
module in 2016, but it is unknown as of today.

Point to the proper boolean knob to avoid confusion.
This commit is contained in:
Klemens Nanni 2020-10-01 19:32:46 +02:00 committed by Andreas Rammhold
parent af27072f1d
commit e438d4a04f
No known key found for this signature in database
GPG Key ID: E432E410B5E48C86
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
nixos/modules/services/networking/nftables.nix
View File

@ -99,7 +99,7 @@ in
config = mkIf cfg.enable { config = mkIf cfg.enable {
assertions = [{ assertions = [{
assertion = config.networking.firewall.enable == false; assertion = config.networking.firewall.enable == false;
message = "You can not use nftables with services.networking.firewall."; message = "You can not use nftables and iptables at the same time. networking.firewall.enable must be set to false.";
}]; }];
boot.blacklistedKernelModules = [ "ip_tables" ]; boot.blacklistedKernelModules = [ "ip_tables" ];
environment.systemPackages = [ pkgs.nftables ]; environment.systemPackages = [ pkgs.nftables ];