diff options
| author | Aaron Andersen <aaron@fosslib.net> | 2021-09-19 11:31:21 -0400 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-09-19 11:31:21 -0400 |
| commit | 559449530f16302862fc65265c1b21411c341734 (patch) | |
| tree | dbfeb2339f622d1a3dcc4f5db4dd2ebbb112043c /nixos | |
| parent | cb9167139eda6d4c3143d2ba1e7cf848a0a9718d (diff) | |
| parent | 94f775024eec2cdf676ad1017a58660619fb3dd0 (diff) | |
| download | nixpkgs-559449530f16302862fc65265c1b21411c341734.tar nixpkgs-559449530f16302862fc65265c1b21411c341734.tar.gz nixpkgs-559449530f16302862fc65265c1b21411c341734.tar.bz2 nixpkgs-559449530f16302862fc65265c1b21411c341734.tar.lz nixpkgs-559449530f16302862fc65265c1b21411c341734.tar.xz nixpkgs-559449530f16302862fc65265c1b21411c341734.tar.zst nixpkgs-559449530f16302862fc65265c1b21411c341734.zip | |
Merge pull request #132319 from onny/opensnitch
nixos/opensnitch: Add module for opensnitch
Diffstat (limited to 'nixos')
| -rw-r--r-- | nixos/doc/manual/from_md/release-notes/rl-2111.section.xml | 7 | ||||
| -rw-r--r-- | nixos/doc/manual/release-notes/rl-2111.section.md | 2 | ||||
| -rw-r--r-- | nixos/modules/module-list.nix | 1 | ||||
| -rw-r--r-- | nixos/modules/services/security/opensnitch.nix | 24 |
4 files changed, 34 insertions, 0 deletions
diff --git a/nixos/doc/manual/from_md/release-notes/rl-2111.section.xml b/nixos/doc/manual/from_md/release-notes/rl-2111.section.xml index f314272a18d..07af72ea8d9 100644 --- a/nixos/doc/manual/from_md/release-notes/rl-2111.section.xml +++ b/nixos/doc/manual/from_md/release-notes/rl-2111.section.xml @@ -130,6 +130,13 @@ </listitem> <listitem> <para> + <link xlink:href="https://github.com/evilsocket/opensnitch">opensnitch</link>, + an application firewall. Available as + <link linkend="opt-services.opensnitch.enable">services.opensnitch</link>. + </para> + </listitem> + <listitem> + <para> <link xlink:href="https://www.snapraid.it/">snapraid</link>, a backup program for disk arrays. Available as <link linkend="opt-snapraid.enable">snapraid</link>. diff --git a/nixos/doc/manual/release-notes/rl-2111.section.md b/nixos/doc/manual/release-notes/rl-2111.section.md index 0b0ffc4b03b..586955057bd 100644 --- a/nixos/doc/manual/release-notes/rl-2111.section.md +++ b/nixos/doc/manual/release-notes/rl-2111.section.md @@ -41,6 +41,8 @@ pt-services.clipcat.enable). - [vikunja](https://vikunja.io), a to-do list app. Available as [services.vikunja](#opt-services.vikunja.enable). +- [opensnitch](https://github.com/evilsocket/opensnitch), an application firewall. Available as [services.opensnitch](#opt-services.opensnitch.enable). + - [snapraid](https://www.snapraid.it/), a backup program for disk arrays. Available as [snapraid](#opt-snapraid.enable). diff --git a/nixos/modules/module-list.nix b/nixos/modules/module-list.nix index 3a0fd65d3b3..b07b30c8c3e 100644 --- a/nixos/modules/module-list.nix +++ b/nixos/modules/module-list.nix @@ -915,6 +915,7 @@ ./services/security/nginx-sso.nix ./services/security/oauth2_proxy.nix ./services/security/oauth2_proxy_nginx.nix + ./services/security/opensnitch.nix ./services/security/privacyidea.nix ./services/security/physlock.nix ./services/security/shibboleth-sp.nix diff --git a/nixos/modules/services/security/opensnitch.nix b/nixos/modules/services/security/opensnitch.nix new file mode 100644 index 00000000000..919346cf2bb --- /dev/null +++ b/nixos/modules/services/security/opensnitch.nix @@ -0,0 +1,24 @@ +{ config, lib, pkgs, ... }: + +with lib; + +let + name = "opensnitch"; + cfg = config.services.opensnitch; +in { + options = { + services.opensnitch = { + enable = mkEnableOption "Opensnitch application firewall"; + }; + }; + + config = mkIf cfg.enable { + + systemd = { + packages = [ pkgs.opensnitch ]; + services.opensnitchd.wantedBy = [ "multi-user.target" ]; + }; + + }; +} + |