From 5db630dd9dfd8e9cdca7ca328c070b76278130b8 Mon Sep 17 00:00:00 2001
From: Guy Chronister <guychronister@outlook.com>
Date: Tue, 21 Apr 2026 10:52:30 -0500
Subject: [PATCH] iptables-legacy: migrate to by-name

---
 pkgs/by-name/ip/iptables-legacy/package.nix | 11 +++++++++++
 pkgs/top-level/all-packages.nix             |  1 -
 2 files changed, 11 insertions(+), 1 deletion(-)
 create mode 100644 pkgs/by-name/ip/iptables-legacy/package.nix

diff --git a/pkgs/by-name/ip/iptables-legacy/package.nix b/pkgs/by-name/ip/iptables-legacy/package.nix
new file mode 100644
index 000000000000..da3f0ab09f4a
--- /dev/null
+++ b/pkgs/by-name/ip/iptables-legacy/package.nix
@@ -0,0 +1,11 @@
+{
+  iptables,
+  ...
+}@args:
+
+(iptables.override (
+  {
+    nftablesCompat = false;
+  }
+  // removeAttrs args [ "iptables" ]
+))
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index e407596263d9..868da99eb942 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -8444,7 +8444,6 @@ with pkgs;
   iputils = hiPrio (callPackage ../os-specific/linux/iputils { });
   # hiPrio for collisions with inetutils (ping)
 
-  iptables-legacy = callPackage ../os-specific/linux/iptables { nftablesCompat = false; };
   iptables-nftables-compat = iptables;
 
   jool-cli = callPackage ../os-specific/linux/jool/cli.nix { };