summary refs log tree commit diff
path: root/nixos/modules/services/networking/nftables.nix
diff options
context:
space:
mode:
authorKlemens Nanni <klemens@posteo.de>2020-10-01 19:32:46 +0200
committerAndreas Rammhold <andreas@rammhold.de>2020-10-02 00:25:57 +0200
commite438d4a04f505adf63a453df7173278db6ee817c (patch)
treef596cfeebc23421316fb131001890056516c62d1 /nixos/modules/services/networking/nftables.nix
parentaf27072f1d35dcde78ab1e3b384082f5498725e6 (diff)
downloadnixpkgs-e438d4a04f505adf63a453df7173278db6ee817c.tar
nixpkgs-e438d4a04f505adf63a453df7173278db6ee817c.tar.gz
nixpkgs-e438d4a04f505adf63a453df7173278db6ee817c.tar.bz2
nixpkgs-e438d4a04f505adf63a453df7173278db6ee817c.tar.lz
nixpkgs-e438d4a04f505adf63a453df7173278db6ee817c.tar.xz
nixpkgs-e438d4a04f505adf63a453df7173278db6ee817c.tar.zst
nixpkgs-e438d4a04f505adf63a453df7173278db6ee817c.zip
nftables: Warn about correct firewall setting
services.networking.firewall might have existed during import of this
module in 2016, but it is unknown as of today.

Point to the proper boolean knob to avoid confusion.
Diffstat (limited to 'nixos/modules/services/networking/nftables.nix')
-rw-r--r--nixos/modules/services/networking/nftables.nix2
1 files changed, 1 insertions, 1 deletions
diff --git a/nixos/modules/services/networking/nftables.nix b/nixos/modules/services/networking/nftables.nix
index ec9d9753cfe..cb75142965e 100644
--- a/nixos/modules/services/networking/nftables.nix
+++ b/nixos/modules/services/networking/nftables.nix
@@ -99,7 +99,7 @@ in
   config = mkIf cfg.enable {
     assertions = [{
       assertion = config.networking.firewall.enable == false;
-      message = "You can not use nftables with services.networking.firewall.";
+      message = "You can not use nftables and iptables at the same time. networking.firewall.enable must be set to false.";
     }];
     boot.blacklistedKernelModules = [ "ip_tables" ];
     environment.systemPackages = [ pkgs.nftables ];