summary refs log tree commit diff
path: root/nixos/modules/services/networking/openvpn.nix
diff options
context:
space:
mode:
authorLeon Schuermann <leon.git@is.currently.online>2018-01-16 11:40:16 +0700
committerLeon Schuermann <leon.git@is.currently.online>2018-01-16 11:40:16 +0700
commit22e83d26673160bc7ad6f5a36b9ee01373806cd8 (patch)
tree185d08ebd3c93ce39cef8cfaed245f1f875abc6d /nixos/modules/services/networking/openvpn.nix
parente45a06ebd1d761ccd48b6279c7ebb4429b17a6aa (diff)
downloadnixpkgs-22e83d26673160bc7ad6f5a36b9ee01373806cd8.tar
nixpkgs-22e83d26673160bc7ad6f5a36b9ee01373806cd8.tar.gz
nixpkgs-22e83d26673160bc7ad6f5a36b9ee01373806cd8.tar.bz2
nixpkgs-22e83d26673160bc7ad6f5a36b9ee01373806cd8.tar.lz
nixpkgs-22e83d26673160bc7ad6f5a36b9ee01373806cd8.tar.xz
nixpkgs-22e83d26673160bc7ad6f5a36b9ee01373806cd8.tar.zst
nixpkgs-22e83d26673160bc7ad6f5a36b9ee01373806cd8.zip
openvpn: add warning about world-readable credentials
Diffstat (limited to 'nixos/modules/services/networking/openvpn.nix')
-rw-r--r--nixos/modules/services/networking/openvpn.nix2
1 files changed, 2 insertions, 0 deletions
diff --git a/nixos/modules/services/networking/openvpn.nix b/nixos/modules/services/networking/openvpn.nix
index 8a059f60954..7a96b673c51 100644
--- a/nixos/modules/services/networking/openvpn.nix
+++ b/nixos/modules/services/networking/openvpn.nix
@@ -171,6 +171,8 @@ in
             description = ''
               This option can be used to store the username / password credentials
               with the "auth-user-pass" authentication method.
+
+              WARNING: Using this option will put the credentials WORLD-READABLE in the Nix store!
             '';
             type = types.nullOr (types.submodule {