4e29638323
This reverts commit 872770286d.
This will fix fwknop as well (should have done it like this in the first
place, where was my mind...).
Conclusion: Did something stupid... :o - I am *so incredibly sorry*,
will be way more careful (was already careful, but apparently not
enought...) next time and use nox.
Sorry @everyone and thanks @calvertvl for noticing this.
66 lines
2 KiB
Nix
66 lines
2 KiB
Nix
{ stdenv, fetchFromGitHub, autoreconfHook, lib
|
|
, libpcap, texinfo
|
|
, iptables
|
|
, gnupgSupport ? true, gnupg, gpgme # Increases dependencies!
|
|
, wgetSupport ? true, wget
|
|
, buildServer ? true
|
|
, buildClient ? true }:
|
|
|
|
stdenv.mkDerivation rec {
|
|
name = "${pname}-${version}";
|
|
pname = "fwknop";
|
|
version = "2.6.9";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "mrash";
|
|
repo = pname;
|
|
rev = version;
|
|
sha256 = "1509d1lzfmhavdwi65dwb0jaglpy8ciccgpcnhx9ks6s7irn923c";
|
|
};
|
|
|
|
nativeBuildInputs = [ autoreconfHook ];
|
|
buildInputs = [ libpcap texinfo ]
|
|
++ stdenv.lib.optional gnupgSupport [ gnupg gpgme.dev ]
|
|
++ stdenv.lib.optional wgetSupport [ wget ];
|
|
|
|
configureFlags = ''
|
|
--sysconfdir=/etc
|
|
--localstatedir=/run
|
|
--with-iptables=${iptables}/sbin/iptables
|
|
${lib.optionalString (!buildServer) "--disable-server"}
|
|
${lib.optionalString (!buildClient) "--disable-client"}
|
|
${lib.optionalString gnupgSupport ''
|
|
--with-gpgme
|
|
--with-gpgme-prefix=${gpgme.dev}
|
|
--with-gpg=${gnupg}
|
|
''}
|
|
${lib.optionalString wgetSupport ''
|
|
--with-wget=${wget}/bin/wget
|
|
''}
|
|
'';
|
|
|
|
# Temporary hack to copy the example configuration files into the nix-store,
|
|
# this'll probably be helpful until there's a NixOS module for that (feel free
|
|
# to ping me (@primeos) if you want to help).
|
|
preInstall = ''
|
|
substituteInPlace Makefile --replace\
|
|
"sysconfdir = /etc"\
|
|
"sysconfdir = $out/etc"
|
|
substituteInPlace server/Makefile --replace\
|
|
"wknopddir = /etc/fwknop"\
|
|
"wknopddir = $out/etc/fwknop"
|
|
'';
|
|
|
|
meta = with stdenv.lib; {
|
|
description =
|
|
"Single Packet Authorization (and Port Knocking) server/client";
|
|
longDescription = ''
|
|
fwknop stands for the "FireWall KNock OPerator", and implements an
|
|
authorization scheme called Single Packet Authorization (SPA).
|
|
'';
|
|
homepage = "https://www.cipherdyne.org/fwknop/";
|
|
license = licenses.gpl2Plus;
|
|
platforms = platforms.linux;
|
|
maintainers = with maintainers; [ primeos ];
|
|
};
|
|
}
|