diff options
| author | Naïm Favier <n@monade.li> | 2022-10-14 10:32:02 +0200 |
|---|---|---|
| committer | Naïm Favier <n@monade.li> | 2022-12-26 10:28:03 +0100 |
| commit | dc1e00bd8bcf7040573a3a6721fd264d900d13d4 (patch) | |
| tree | a88f23314e0db1a5ef5a6b55b9c4cb57a1af44a8 /nixos/modules/services | |
| parent | f9ffb733866df159b7719cb45f43763ea6f75e9b (diff) | |
| download | nixpkgs-dc1e00bd8bcf7040573a3a6721fd264d900d13d4.tar nixpkgs-dc1e00bd8bcf7040573a3a6721fd264d900d13d4.tar.gz nixpkgs-dc1e00bd8bcf7040573a3a6721fd264d900d13d4.tar.bz2 nixpkgs-dc1e00bd8bcf7040573a3a6721fd264d900d13d4.tar.lz nixpkgs-dc1e00bd8bcf7040573a3a6721fd264d900d13d4.tar.xz nixpkgs-dc1e00bd8bcf7040573a3a6721fd264d900d13d4.tar.zst nixpkgs-dc1e00bd8bcf7040573a3a6721fd264d900d13d4.zip | |
nixos/wg-quick: use `networking.firewall.package`
Use `nftables` if available.
Diffstat (limited to 'nixos/modules/services')
| -rw-r--r-- | nixos/modules/services/networking/wg-quick.nix | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/nixos/modules/services/networking/wg-quick.nix b/nixos/modules/services/networking/wg-quick.nix index a678d743bb7..34210580f53 100644 --- a/nixos/modules/services/networking/wg-quick.nix +++ b/nixos/modules/services/networking/wg-quick.nix @@ -273,7 +273,11 @@ let after = [ "network.target" "network-online.target" ]; wantedBy = optional values.autostart "multi-user.target"; environment.DEVICE = name; - path = [ pkgs.kmod pkgs.wireguard-tools config.networking.resolvconf.package ]; + path = [ + pkgs.wireguard-tools + config.networking.firewall.package # iptables or nftables + config.networking.resolvconf.package # openresolv or systemd + ]; serviceConfig = { Type = "oneshot"; @@ -281,7 +285,7 @@ let }; script = '' - ${optionalString (!config.boot.isContainer) "modprobe wireguard"} + ${optionalString (!config.boot.isContainer) "${pkgs.kmod}/bin/modprobe wireguard"} ${optionalString (values.configFile != null) '' cp ${values.configFile} ${configPath} ''} |