Use new opensnitch service

This commit is contained in:
Dave Gallant
2021-12-13 22:18:37 -05:00
parent aeda881c5f
commit 0058604e04
5 changed files with 4 additions and 27 deletions

View File

@@ -32,6 +32,8 @@
time.timeZone = "America/Toronto";
services.opensnitch.enable = true;
sound.enable = true;
# Enable 32bit for steam

View File

@@ -1,24 +0,0 @@
{ pkgs, ... }:
{
systemd = {
services = {
opensnitch = {
description = "Opensnitch Application Firewall Daemon";
wants = [ "network.target" ];
after = [ "network.target" ];
wantedBy = [ "multi-user.target" ];
path = [ pkgs.iptables ];
serviceConfig = {
Type = "simple";
PermissionsStartOnly = true;
ExecStartPre = "${pkgs.coreutils}/bin/mkdir -p /etc/opensnitch/rules";
ExecStart = "${pkgs.opensnitch}/bin/opensnitchd -rules-path /etc/opensnitch/rules";
Restart = "always";
RestartSec = 30;
};
enable = true;
};
};
};
}

View File

@@ -185,8 +185,6 @@ in
libreoffice
linuxPackages.perf
networkmanager-openvpn
opensnitch
opensnitch-ui
pinentry-curses
pulseeffects-pw
qemu

View File

@@ -29,7 +29,6 @@
./common/fonts.nix
./common/linux.nix
./common/netdata/default.nix
./common/opensnitch/default.nix
./common/networking.nix
./common/packages.nix
./common/printing.nix

View File

@@ -34,6 +34,8 @@ in
};
};
services.opensnitch-ui.enable = true;
fonts.fontconfig.enable = true;
programs = {