chvp/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

UGent VPN

Browse source
This commit is contained in:
Charlotte Van Petegem 2021-06-21 16:03:42 +02:00
parent 6fa4997d8c
commit 1cb0e4bdc7
No known key found for this signature in database
GPG key ID: 019E764B7184435A
8 changed files with 45 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

32
modules/vpn.nix Normal file
View file

@ -0,0 +1,32 @@
{ config, lib, pkgs, ... }:
{
imports = [
./vpn/secret.nix
];
options = {
chvp.vpn.ugent.enable = lib.mkOption {
default = false;
example = true;
};
};
config = lib.mkIf config.chvp.vpn.ugent.enable {
systemd.services = {
ugent-global-vpn.after = [ "network.target" ];
ugent-local-vpn.after = [ "network.target" ];
};
security.polkit.extraConfig = ''
polkit.addRule(function(action, subject) {
if (action.id == "org.freedesktop.systemd1.manage-units" && action.lookup("unit") == "ugent-global-vpn.service") {
return polkit.Result.YES;
}
if (action.id == "org.freedesktop.systemd1.manage-units" && action.lookup("unit") == "ugent-local-vpn.service") {
return polkit.Result.YES;
}
});
'';
age.secrets."passwords/ugent-vpn".file = ../secrets/passwords/ugent-vpn.age;
};
}