gensokyo-zone/infrastructure
1
0
Fork 0
mirror of https://github.com/gensokyo-zone/infrastructure.git synced 2026-02-09 04:19:19 -08:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(nftables): empty peeps

Browse source
This commit is contained in:
arcnmx 2025-10-20 09:31:13 -07:00
parent ceeb079b58
commit 0db7d3b943
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
modules/nixos/access/peeps.nix
View file

@ -15,7 +15,7 @@
hasSops = options ? sops.secrets; hasSops = options ? sops.secrets;
in { in {
options.networking.access.peeps = with lib.types; { options.networking.access.peeps = with lib.types; {
enable = mkEnableOption "peeps" // {default = hasSops;}; enable = mkEnableOption "peeps" // {default = hasSops && cfg.ranges != {};};
ranges = mkOption { ranges = mkOption {
type = attrsOf str; type = attrsOf str;
default = {}; default = {};
@ -57,7 +57,7 @@ in {
firewall.interfaces.peeps = { firewall.interfaces.peeps = {
nftables.enable = cfg.enable; nftables.enable = cfg.enable;
nftables.conditions = [ nftables.conditions = [
(mkIf (cfg.enable && networking.enableIPv6) condition) (mkIf (cfg.enable && networking.enableIPv6 && cfg.ranges != {}) condition)
]; ];
}; };
}; };