nixos/strongswan: use strings for secrets.

The nixos module artifically enforces type.path whereas the ipsec secret configuration files
accept pattern or relative paths.
Enforcing absolute paths already caused problems with l2tp vpn:
https://github.com/nm-l2tp/NetworkManager-l2tp/issues/108
This commit is contained in:
Matthieu Coudron 2019-04-06 10:28:33 +09:00
parent 21d1b195c8
commit 08b8c6caf2

View File

@ -54,7 +54,7 @@ in
enable = mkEnableOption "strongSwan";
secrets = mkOption {
type = types.listOf types.path;
type = types.listOf types.str;
default = [];
example = [ "/run/keys/ipsec-foo.secret" ];
description = ''