summary refs log tree commit diff
path: root/nixos/modules/services/networking/privoxy.nix
diff options
context:
space:
mode:
authorrnhmjoj <rnhmjoj@inventati.org>2021-03-11 08:02:09 +0100
committerrnhmjoj <rnhmjoj@inventati.org>2021-03-11 08:17:50 +0100
commit7962df46febf67976dadf6ecf9acc033804580bd (patch)
treed30013191b6c6c8efcec2ecddcd5ae4ef16d0293 /nixos/modules/services/networking/privoxy.nix
parent7008b7e0154709542f941347182df86fb3e12b35 (diff)
downloadnixpkgs-7962df46febf67976dadf6ecf9acc033804580bd.tar
nixpkgs-7962df46febf67976dadf6ecf9acc033804580bd.tar.gz
nixpkgs-7962df46febf67976dadf6ecf9acc033804580bd.tar.bz2
nixpkgs-7962df46febf67976dadf6ecf9acc033804580bd.tar.lz
nixpkgs-7962df46febf67976dadf6ecf9acc033804580bd.tar.xz
nixpkgs-7962df46febf67976dadf6ecf9acc033804580bd.tar.zst
nixpkgs-7962df46febf67976dadf6ecf9acc033804580bd.zip
nixos/privoxy: make certificate-directory optional
The tmpfiles.d rule should only be added if inspectHttps is enabled.
Diffstat (limited to 'nixos/modules/services/networking/privoxy.nix')
-rw-r--r--nixos/modules/services/networking/privoxy.nix5
1 files changed, 2 insertions, 3 deletions
diff --git a/nixos/modules/services/networking/privoxy.nix b/nixos/modules/services/networking/privoxy.nix
index f1a9c6029cb..7c22b7d09b9 100644
--- a/nixos/modules/services/networking/privoxy.nix
+++ b/nixos/modules/services/networking/privoxy.nix
@@ -205,9 +205,8 @@ in
 
     users.groups.privoxy = {};
 
-    systemd.tmpfiles.rules = with cfg.settings; [
-      "d ${certificate-directory} 0770 privoxy privoxy ${cfg.certsLifetime}"
-    ];
+    systemd.tmpfiles.rules = optional cfg.inspectHttps
+      "d ${cfg.settings.certificate-directory} 0770 privoxy privoxy ${cfg.certsLifetime}";
 
     systemd.services.privoxy = {
       description = "Filtering web proxy";