firewall.nix: Respect networking.enableIPv6 = false

Reported-by: Pablo Costa <modulistic@gmail.com>
2012-09-18 17:20:46 -04:00 · 2012-09-18 17:20:46 -04:00 · d12dd340b6
commit d12dd340b6
parent 75583c7984
1 changed files with 3 additions and 1 deletions
--- a/modules/services/networking/firewall.nix
+++ b/modules/services/networking/firewall.nix
@ -33,7 +33,9 @@ let
      # Helper command to manipulate both the IPv4 and IPv6 tables.
      ip46tables() {
        iptables "$@"
-        ip6tables "$@"
+        ${optionalString config.networking.enableIPv6 ''
+          ip6tables "$@"
+        ''}
      }
    '';