diff options
| author | Alejandro Soto <alejandro@34project.org> | 2022-12-29 04:57:16 -0600 |
|---|---|---|
| committer | Alejandro Soto <alejandro@34project.org> | 2022-12-29 04:59:07 -0600 |
| commit | 0d849ddb6a666748c873e0a596fbd4f276f1a939 (patch) | |
| tree | 842b41e2cf971bb1a9e1cbb4836381ad64495403 /sys/nspawn.nix | |
| parent | e508b2b5d7c7e3504bb5e8ff33fd3bbfc006f9ef (diff) | |
dmz: add dummy config
Diffstat (limited to 'sys/nspawn.nix')
| -rw-r--r-- | sys/nspawn.nix | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/sys/nspawn.nix b/sys/nspawn.nix new file mode 100644 index 0000000..528223a --- /dev/null +++ b/sys/nspawn.nix @@ -0,0 +1,11 @@ +{ lib, config, ... }: +with lib; let + cfg = config.local.nspawn; +in +{ + options.local.nspawn.dmz.enable = mkEnableOption "DMZ services in a container"; + + config.systemd.nspawn.dmz = mkIf cfg.dmz.enable { + execConfig.PrivateUsers = true; + }; +} |