gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nftables: Warn about correct firewall setting

Browse Source 
services.networking.firewall might have existed during import of this
module in 2016, but it is unknown as of today.

Point to the proper boolean knob to avoid confusion.
This commit is contained in:
Klemens Nanni
2020-10-01 19:32:46 +02:00
committed by Andreas Rammhold
parent af27072f1d
commit e438d4a04f
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
nixos/modules/services/networking/nftables.nix
View File

@@ -99,7 +99,7 @@ in
config = mkIf cfg.enable { config = mkIf cfg.enable {
assertions = [{ assertions = [{
assertion = config.networking.firewall.enable == false; assertion = config.networking.firewall.enable == false;
message = "You can not use nftables with services.networking.firewall."; message = "You can not use nftables and iptables at the same time. networking.firewall.enable must be set to false.";
}]; }];
boot.blacklistedKernelModules = [ "ip_tables" ]; boot.blacklistedKernelModules = [ "ip_tables" ];
environment.systemPackages = [ pkgs.nftables ]; environment.systemPackages = [ pkgs.nftables ];