From 0d849ddb6a666748c873e0a596fbd4f276f1a939 Mon Sep 17 00:00:00 2001
From: Alejandro Soto <alejandro@34project.org>
Date: Thu, 29 Dec 2022 04:57:16 -0600
Subject: dmz: add dummy config

---
 sys/default.nix |  3 ++-
 sys/nspawn.nix  | 11 +++++++++++
 2 files changed, 13 insertions(+), 1 deletion(-)
 create mode 100644 sys/nspawn.nix

diff --git a/sys/default.nix b/sys/default.nix
index 228c126..3224c40 100644
--- a/sys/default.nix
+++ b/sys/default.nix
@@ -1,10 +1,11 @@
-{ lib, config, pkgs, modulesPath, ... }:
+{ lib, config, pkgs, ... }:
 with lib; {
   imports = [
     ./auth.nix
     ./boot.nix
     ./fs
     ./net.nix
+    ./nspawn.nix
     ./options.nix
     ./users.nix
   ];
diff --git a/sys/nspawn.nix b/sys/nspawn.nix
new file mode 100644
index 0000000..528223a
--- /dev/null
+++ b/sys/nspawn.nix
@@ -0,0 +1,11 @@
+{ lib, config, ... }:
+with lib; let
+  cfg = config.local.nspawn;
+in
+{
+  options.local.nspawn.dmz.enable = mkEnableOption "DMZ services in a container";
+
+  config.systemd.nspawn.dmz = mkIf cfg.dmz.enable {
+    execConfig.PrivateUsers = true;
+  };
+}
-- 
cgit v1.2.3