nftables: Warn about correct firewall setting

services.networking.firewall might have existed during import of this
module in 2016, but it is unknown as of today.

Point to the proper boolean knob to avoid confusion.
This commit is contained in:
Klemens Nanni 2020-10-01 19:32:46 +02:00 committed by Andreas Rammhold
parent af27072f1d
commit e438d4a04f
No known key found for this signature in database
GPG key ID: E432E410B5E48C86

View file

@ -99,7 +99,7 @@ in
config = mkIf cfg.enable {
assertions = [{
assertion = config.networking.firewall.enable == false;
message = "You can not use nftables with services.networking.firewall.";
message = "You can not use nftables and iptables at the same time. networking.firewall.enable must be set to false.";
}];
boot.blacklistedKernelModules = [ "ip_tables" ];
environment.systemPackages = [ pkgs.nftables ];