nixos/opensnitch: include systemd unit

This commit is contained in:
Jonas Heinrich 2021-09-13 20:47:32 +02:00
parent 3592034595
commit d8da97c3fe

View file

@ -5,6 +5,8 @@
, libnetfilter_queue
, libnfnetlink
, lib
, coreutils
, iptables
}:
buildGoModule rec {
@ -32,6 +34,12 @@ buildGoModule rec {
postBuild = ''
mv $GOPATH/bin/daemon $GOPATH/bin/opensnitchd
mkdir -p $out/lib/systemd/system
substitute opensnitchd.service $out/lib/systemd/system/opensnitchd.service \
--replace "/usr/local/bin/opensnitchd" "$out/bin/opensnitchd" \
--replace "/etc/opensnitchd/rules" "/var/lib/opensnitch/rules" \
--replace "/bin/mkdir" "${coreutils}/bin/mkdir"
sed -i '/\[Service\]/a Environment=PATH=${iptables}/bin' $out/lib/systemd/system/opensnitchd.service
'';
vendorSha256 = "sha256-LMwQBFkHg1sWIUITLOX2FZi5QUfOivvrkcl9ELO3Trk=";