nixos/suricata: avoid IFD in config generation (#475219)

2026-01-04 00:15:03 +00:00
parent a588fd06f0 71e707789d
commit 8352649c16
1 changed files with 11 additions and 11 deletions
@@ -32,18 +32,18 @@ in
    configFile = mkOption {
      type = types.path;
      visible = false;
-      default = pkgs.writeTextFile {
-        name = "suricata.yaml";
-        text = ''
-          %YAML 1.1
-          ---
-          ${builtins.readFile (
-            yaml.generate "suricata-settings-raw.yaml" (
+      default =
+        pkgs.runCommand "suricata.yaml"
+          {
+            settingsYaml = yaml.generate "suricata-settings-raw.yaml" (
              filterAttrsRecursive (name: value: value != null) cfg.settings
-            )
-          )}
-        '';
-      };
+            );
+          }
+          ''
+            echo "%YAML 1.1" > $out
+            echo "---" >> $out
+            cat $settingsYaml >> $out
+          '';
      description = ''
        Configuration file for suricata.