openvpn: add warning about world-readable credentials

2018-01-16 11:40:16 +07:00 · 2018-01-16 11:40:16 +07:00 · 22e83d2667
commit 22e83d2667
parent e45a06ebd1
1 changed files with 2 additions and 0 deletions
--- a/nixos/modules/services/networking/openvpn.nix
+++ b/nixos/modules/services/networking/openvpn.nix
@ -171,6 +171,8 @@ in
            description = ''
              This option can be used to store the username / password credentials
              with the "auth-user-pass" authentication method.
+
+              WARNING: Using this option will put the credentials WORLD-READABLE in the Nix store!
            '';
            type = types.nullOr (types.submodule {