about summary refs log tree commit diff
path: root/nixos/modules/services/networking
diff options
context:
space:
mode:
authorxeji <36407913+xeji@users.noreply.github.com>2018-05-05 22:13:15 +0200
committerGitHub <noreply@github.com>2018-05-05 22:13:15 +0200
commit76c8e5ea3b742bf6d1654a7c0448e99b155cdf54 (patch)
tree7f9783c3b001852a0ff623eaf52e4389eff1819a /nixos/modules/services/networking
parent1be056ca30dffb5d904fbb34b9833a9d609bba8f (diff)
parentb81aa02800795724fe0a01e7544c49b04a40994a (diff)
downloadnixlib-76c8e5ea3b742bf6d1654a7c0448e99b155cdf54.tar
nixlib-76c8e5ea3b742bf6d1654a7c0448e99b155cdf54.tar.gz
nixlib-76c8e5ea3b742bf6d1654a7c0448e99b155cdf54.tar.bz2
nixlib-76c8e5ea3b742bf6d1654a7c0448e99b155cdf54.tar.lz
nixlib-76c8e5ea3b742bf6d1654a7c0448e99b155cdf54.tar.xz
nixlib-76c8e5ea3b742bf6d1654a7c0448e99b155cdf54.tar.zst
nixlib-76c8e5ea3b742bf6d1654a7c0448e99b155cdf54.zip
Merge pull request #39055 from abbradar/reload-stop
firewall service: run stop commands in reload
Diffstat (limited to 'nixos/modules/services/networking')
-rw-r--r--nixos/modules/services/networking/firewall.nix3
1 files changed, 3 insertions, 0 deletions
diff --git a/nixos/modules/services/networking/firewall.nix b/nixos/modules/services/networking/firewall.nix
index 20c0b0acf165..c4bd0e7f9eef 100644
--- a/nixos/modules/services/networking/firewall.nix
+++ b/nixos/modules/services/networking/firewall.nix
@@ -242,6 +242,9 @@ let
 
     # Don't allow traffic to leak out until the script has completed
     ip46tables -A INPUT -j nixos-drop
+
+    ${cfg.extraStopCommands}
+
     if ${startScript}; then
       ip46tables -D INPUT -j nixos-drop 2>/dev/null || true
     else