-1

modules/nixos/networking/default.nix

reviewed

··· 17 17 ./optimise.nix 18 18 ./systemd.nix 19 19 ./tailscale.nix 20 20 - ./tcpcrypt.nix 21 20 ./vpn.nix 22 21 ./wireless.nix 23 22 # keep-sorted end

-23

modules/nixos/networking/tcpcrypt.nix

reviewed

··· 1 1 - # FIXME: i have disabeled this since it broke my ipv4 connections 2 2 - { 3 3 - lib, 4 4 - config, 5 5 - ... 6 6 - }: 7 7 - let 8 8 - inherit (lib) mkIf; 9 9 - in 10 10 - { 11 11 - # enable opportunistic TCP encryption 12 12 - # this is NOT a pancea, however, if the receiver supports encryption and the attacker is passive 13 13 - # privacy will be more plausible (but not guaranteed, unlike what the option docs suggest) 14 14 - # networking.tcpcrypt.enable = !config.garden.profiles.server.enable; 15 15 - 16 16 - users = mkIf config.networking.tcpcrypt.enable { 17 17 - groups.tcpcryptd = { }; 18 18 - users.tcpcryptd = { 19 19 - group = "tcpcryptd"; 20 20 - isSystemUser = true; 21 21 - }; 22 22 - }; 23 23 - }