gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos/nix-daemon-firewall: Fix firewall checking

Browse Source
This commit is contained in:
Janne Heß
2025-12-10 18:52:01 +01:00
parent dd9cc36cd0
commit 7ea17890e5
2 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/modules/services/system/nix-daemon-firewall.nix
+6 -2
View File
@@ -9,13 +9,13 @@ in
enable = lib.mkEnableOption "firewalling for outgoing traffic of the nix daemon";
allowLoopback = lib.mkOption {
description = "Whether not not to allow traffic on the loopback interface. Traffic is still subject to protocol/port rules";
description = "Whether to allow traffic on the loopback interface. Traffic is still subject to protocol/port rules";
default = false;
example = true;
};
allowPrivateNetworks = lib.mkOption {
description = "Whether not not to allow traffic to local networks. Traffic is still subject to protocol/port rules. Note that this option may break DNS resolution when the DNS resolver is in a local network";
description = "Whether to allow traffic to local networks. Traffic is still subject to protocol/port rules. Note that this option may break DNS resolution when the DNS resolver is in a local network";
default = true;
example = false;
};
@@ -137,5 +137,9 @@ in
}
}
'';
# Not supported by LKL yet so the ruleset check would fail
networking.nftables.preCheckRuleset = ''
sed -i 's/socket cgroupv2 level 2 @nix_daemon//g' ruleset.conf
'';
};
}
nixos/tests/nix-daemon-firewall.nix
+1 -1
View File
@@ -56,7 +56,7 @@ let
hash = hashes.a;
};
# Generates a file but tires to resolve via DNS first
# Generates a file but tries to resolve via DNS first
resolver = pkgs.writeText "pinger.nix" ''
derivation {
name = "resolver";