diff options
author | xeji <36407913+xeji@users.noreply.github.com> | 2018-05-05 22:13:15 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2018-05-05 22:13:15 +0200 |
commit | 76c8e5ea3b742bf6d1654a7c0448e99b155cdf54 (patch) | |
tree | 7f9783c3b001852a0ff623eaf52e4389eff1819a /nixos/modules/services/networking | |
parent | 1be056ca30dffb5d904fbb34b9833a9d609bba8f (diff) | |
parent | b81aa02800795724fe0a01e7544c49b04a40994a (diff) | |
download | nixlib-76c8e5ea3b742bf6d1654a7c0448e99b155cdf54.tar nixlib-76c8e5ea3b742bf6d1654a7c0448e99b155cdf54.tar.gz nixlib-76c8e5ea3b742bf6d1654a7c0448e99b155cdf54.tar.bz2 nixlib-76c8e5ea3b742bf6d1654a7c0448e99b155cdf54.tar.lz nixlib-76c8e5ea3b742bf6d1654a7c0448e99b155cdf54.tar.xz nixlib-76c8e5ea3b742bf6d1654a7c0448e99b155cdf54.tar.zst nixlib-76c8e5ea3b742bf6d1654a7c0448e99b155cdf54.zip |
Merge pull request #39055 from abbradar/reload-stop
firewall service: run stop commands in reload
Diffstat (limited to 'nixos/modules/services/networking')
-rw-r--r-- | nixos/modules/services/networking/firewall.nix | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/nixos/modules/services/networking/firewall.nix b/nixos/modules/services/networking/firewall.nix index 20c0b0acf165..c4bd0e7f9eef 100644 --- a/nixos/modules/services/networking/firewall.nix +++ b/nixos/modules/services/networking/firewall.nix @@ -242,6 +242,9 @@ let # Don't allow traffic to leak out until the script has completed ip46tables -A INPUT -j nixos-drop + + ${cfg.extraStopCommands} + if ${startScript}; then ip46tables -D INPUT -j nixos-drop 2>/dev/null || true else |