nixos/firewall: Add ipset utility
This commit is contained in:
parent
c34daa0b48
commit
0f3a7b0e3c
|
@ -443,7 +443,7 @@ in
|
|||
|
||||
networking.firewall.trustedInterfaces = [ "lo" ];
|
||||
|
||||
environment.systemPackages = [ pkgs.iptables ];
|
||||
environment.systemPackages = [ pkgs.iptables pkgs.ipset ];
|
||||
|
||||
boot.kernelModules = map (x: "nf_conntrack_${x}") cfg.connectionTrackingModules;
|
||||
boot.extraModprobeConfig = optionalString (!cfg.autoLoadConntrackHelpers) ''
|
||||
|
@ -462,7 +462,7 @@ in
|
|||
before = [ "network-pre.target" ];
|
||||
after = [ "systemd-modules-load.service" ];
|
||||
|
||||
path = [ pkgs.iptables ];
|
||||
path = [ pkgs.iptables pkg.ipset ];
|
||||
|
||||
# FIXME: this module may also try to load kernel modules, but
|
||||
# containers don't have CAP_SYS_MODULE. So the host system had
|
||||
|
|
Loading…
Reference in a new issue