movefasta/nixpkgs
0
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-07-13 21:50:33 +03:00
Code Activity

nixos/wireguard-networkd: disable by default

Browse source 
Enabling networking.wireguard.useNetworkd currently requires users to
modify the permissions of their private key files. Since that is a bad
upgrade experience, the module should be disabled by default for now.
Once systemd credential support is added to the module, it should be
safe to once again enable it by default for networkd users.
This commit is contained in:
Majiir Paktu 2024-12-10 16:54:50 -05:00
parent 14281791dc
commit a93d42e97e
2 changed files with 2 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
nixos/doc/manual/release-notes/rl-2505.section.md
View file

@ -121,7 +121,7 @@
- Cinnamon has been updated to 6.4. - Cinnamon has been updated to 6.4.
- `networking.wireguard` now has an optional networkd backend. It is enabled by default when `networking.useNetworkd` is enabled, and it can be enabled alongside scripted networking with `networking.wireguard.useNetworkd`. Some `networking.wireguard` options have slightly different behavior with the networkd and script-based backends, documented in each option. Before upgrading, make sure the `privateKeyFile` and `presharedKeyFile` paths are readable by the `systemd-network` user if using the networkd backend. - `networking.wireguard` now has an optional networkd backend, enabled with `networking.wireguard.useNetworkd`. Some `networking.wireguard` options have slightly different behavior with the networkd and script-based backends, documented in each option. Before upgrading, make sure the `privateKeyFile` and `presharedKeyFile` paths are readable by the `systemd-network` user if using the networkd backend.
- `services.avahi.ipv6` now defaults to true. - `services.avahi.ipv6` now defaults to true.

3
nixos/modules/services/networking/wireguard-networkd.nix
View file

@ -96,8 +96,7 @@ in
options.networking.wireguard = { options.networking.wireguard = {
useNetworkd = mkOption { useNetworkd = mkOption {
default = config.networking.useNetworkd; default = false;
defaultText = literalExpression "config.networking.useNetworkd";
type = types.bool; type = types.bool;
description = '' description = ''
Whether to use networkd as the network configuration backend for Whether to use networkd as the network configuration backend for