BoomMicrophone/nixpkgs-suyu
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

nixos/mullvad-vpn: fix firewall issues & remove xfix as maintainer

Browse source
This commit is contained in:
Yannick Markus 2021-05-06 13:23:54 +02:00
parent e32d497623
commit 19b1eac1b0
No known key found for this signature in database
GPG key ID: 5FBAA002554EFC70
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
nixos/modules/services/networking/mullvad-vpn.nix
View file

@ -9,6 +9,7 @@ with lib;
default = false;
description = ''
This option enables Mullvad VPN daemon.
This sets <option>networking.firewall.checkReversePath</option> to "loose", which might be undesirable for security.
'';
};
@ -18,6 +19,9 @@ with lib;
# mullvad-daemon writes to /etc/iproute2/rt_tables
networking.iproute2.enable = true;
# See https://github.com/NixOS/nixpkgs/issues/113589
networking.firewall.checkReversePath = "loose";
systemd.services.mullvad-daemon = {
description = "Mullvad VPN daemon";
wantedBy = [ "multi-user.target" ];
@ -42,5 +46,5 @@ with lib;
};
};
meta.maintainers = [ maintainers.xfix ];
meta.maintainers = with maintainers; [ ymarkus ];
}