summary refs log tree commit diff
path: root/nixos/modules/services/security
diff options
context:
space:
mode:
authorJonas Heinrich <onny@project-insanity.org>2021-08-01 16:06:53 +0200
committerJonas Heinrich <onny@project-insanity.org>2021-09-14 18:51:23 +0200
commit94f775024eec2cdf676ad1017a58660619fb3dd0 (patch)
tree7ae2b225db10b6940d22768582d7253a056b55bb /nixos/modules/services/security
parent6702c6c806cf134083f8f33d11694d2fefe735c3 (diff)
downloadnixpkgs-94f775024eec2cdf676ad1017a58660619fb3dd0.tar
nixpkgs-94f775024eec2cdf676ad1017a58660619fb3dd0.tar.gz
nixpkgs-94f775024eec2cdf676ad1017a58660619fb3dd0.tar.bz2
nixpkgs-94f775024eec2cdf676ad1017a58660619fb3dd0.tar.lz
nixpkgs-94f775024eec2cdf676ad1017a58660619fb3dd0.tar.xz
nixpkgs-94f775024eec2cdf676ad1017a58660619fb3dd0.tar.zst
nixpkgs-94f775024eec2cdf676ad1017a58660619fb3dd0.zip
Opensnitch: Add module
Diffstat (limited to 'nixos/modules/services/security')
-rw-r--r--nixos/modules/services/security/opensnitch.nix24
1 files changed, 24 insertions, 0 deletions
diff --git a/nixos/modules/services/security/opensnitch.nix b/nixos/modules/services/security/opensnitch.nix
new file mode 100644
index 00000000000..919346cf2bb
--- /dev/null
+++ b/nixos/modules/services/security/opensnitch.nix
@@ -0,0 +1,24 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+
+let
+  name = "opensnitch";
+  cfg = config.services.opensnitch;
+in {
+  options = {
+    services.opensnitch = {
+      enable = mkEnableOption "Opensnitch application firewall";
+    };
+  };
+
+  config = mkIf cfg.enable {
+
+    systemd = {
+      packages = [ pkgs.opensnitch ];
+      services.opensnitchd.wantedBy = [ "multi-user.target" ];
+    };
+
+  };
+}
+