public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos/strongswan: use strings for secrets.

Browse Source 
The nixos module artifically enforces type.path whereas the ipsec secret configuration files
accept pattern or relative paths.
Enforcing absolute paths already caused problems with l2tp vpn:
https://github.com/nm-l2tp/NetworkManager-l2tp/issues/108
This commit is contained in:
Matthieu Coudron 2019-04-06 10:28:33 +09:00
parent 21d1b195c8
commit 08b8c6caf2
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
nixos/modules/services/networking/strongswan.nix
View File

@ -54,7 +54,7 @@ in
enable = mkEnableOption "strongSwan"; enable = mkEnableOption "strongSwan";
secrets = mkOption { secrets = mkOption {
type = types.listOf types.path; type = types.listOf types.str;
default = []; default = [];
example = [ "/run/keys/ipsec-foo.secret" ]; example = [ "/run/keys/ipsec-foo.secret" ];
description = '' description = ''