summary refs log tree commit diff
path: root/nixos/modules/config/nsswitch.nix
blob: 45695d9cb89f6fe67c10b7a14a81a7caca8bad18 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
# Configuration for the Name Service Switch (/etc/nsswitch.conf).

{ config, lib, pkgs, ... }:

with lib;

let

  inherit (config.services.avahi) nssmdns;
  inherit (config.services.samba) nsswins;

in

{
  options = {

    # NSS modules.  Hacky!
    system.nssModules = mkOption {
      type = types.listOf types.path;
      internal = true;
      default = [];
      description = ''
        Search path for NSS (Name Service Switch) modules.  This allows
        several DNS resolution methods to be specified via
        <filename>/etc/nsswitch.conf</filename>.
      '';
      apply = list:
        {
          inherit list;
          path = makeLibraryPath list;
        };
    };

  };

  config = {

    environment.etc =
      [ # Name Service Switch configuration file.  Required by the C library.
        # !!! Factor out the mdns stuff.  The avahi module should define
        # an option used by this module.
        { source = pkgs.writeText "nsswitch.conf"
            ''
              passwd:    files ldap
              group:     files ldap
              shadow:    files ldap
              hosts:     files ${optionalString nssmdns "mdns_minimal [NOTFOUND=return]"} dns ${optionalString nssmdns "mdns"} ${optionalString nsswins "wins"} myhostname
              networks:  files dns
              ethers:    files
              services:  files
              protocols: files
            '';
          target = "nsswitch.conf";
        }
      ];

    # Use nss-myhostname to ensure that our hostname always resolves to
    # a valid IP address.  It returns all locally configured IP
    # addresses, or ::1 and 127.0.0.2 as fallbacks.
    system.nssModules = [ pkgs.systemd ];

  };
}