Merge pull request #325459 from numinit/nebula-module-tweaks

nixos/nebula: support non-path host keys
This commit is contained in:
Franz Pletz 2024-07-09 16:59:35 +02:00 committed by GitHub
commit f1d54d49b9
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -51,8 +51,8 @@ in
};
key = mkOption {
type = types.path;
description = "Path to the host key.";
type = types.oneOf [types.nonEmptyStr types.path];
description = "Path or reference to the host key.";
example = "/etc/nebula/host.key";
};
@ -241,7 +241,7 @@ in
ProtectKernelModules = true;
ProtectKernelTunables = true;
ProtectProc = "invisible";
ProtectSystem = "strict";
ProtectSystem = true;
RestrictNamespaces = true;
RestrictSUIDSGID = true;
User = networkId;
@ -269,4 +269,6 @@ in
${nameToId netName} = {};
}) enabledNetworks);
};
meta.maintainers = [ numinit ];
}