Merge pull request #121906 from ymarkus/nixos-mullvad

nixos/mullvad-vpn: fix firewall issues & remove xfix as maintainer
This commit is contained in:
Sandro 2021-08-08 15:03:26 +02:00 committed by GitHub
commit b739a14b37
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -9,6 +9,7 @@ with lib;
default = false;
description = ''
This option enables Mullvad VPN daemon.
This sets <option>networking.firewall.checkReversePath</option> to "loose", which might be undesirable for security.
'';
};
@ -18,6 +19,9 @@ with lib;
# mullvad-daemon writes to /etc/iproute2/rt_tables
networking.iproute2.enable = true;
# See https://github.com/NixOS/nixpkgs/issues/113589
networking.firewall.checkReversePath = "loose";
systemd.services.mullvad-daemon = {
description = "Mullvad VPN daemon";
wantedBy = [ "multi-user.target" ];
@ -42,5 +46,5 @@ with lib;
};
};
meta.maintainers = [ maintainers.xfix ];
meta.maintainers = with maintainers; [ ymarkus ];
}