liminix

Unnamed repository; edit this file 'description' to name the repository.
Log | Files | Refs | README | LICENSE

service.nix (314B)

      1 {
      2   liminix
      3 , lib
      4 , firewallgen
      5 , nftables
      6 }:
      7 { ruleset }:
      8 let
      9   inherit (liminix.services) oneshot;
     10   inherit (liminix.lib) typeChecked;
     11   inherit (lib) mkOption types;
     12   script = firewallgen "firewall.nft" ruleset;
     13 in oneshot {
     14   name = "firewall";
     15   up = script;
     16   down = "${nftables}/bin/nft flush ruleset";
     17 }