summary refs log tree commit diff
path: root/nixos
diff options
context:
space:
mode:
authorEmery Hemingway <emery@vfemail.net>2016-07-23 21:02:57 +0200
committerEmery Hemingway <emery@vfemail.net>2016-07-23 21:04:42 +0200
commit90ee01cd3dc029e1d86bc94eb6aa4b5f4b5a0f2e (patch)
tree1ca55e98c455d2511f82774f599c932da2289384 /nixos
parent06d1723c4e520d84be69a30b36e6d7c909e0fcf3 (diff)
downloadnixlib-90ee01cd3dc029e1d86bc94eb6aa4b5f4b5a0f2e.tar
nixlib-90ee01cd3dc029e1d86bc94eb6aa4b5f4b5a0f2e.tar.gz
nixlib-90ee01cd3dc029e1d86bc94eb6aa4b5f4b5a0f2e.tar.bz2
nixlib-90ee01cd3dc029e1d86bc94eb6aa4b5f4b5a0f2e.tar.lz
nixlib-90ee01cd3dc029e1d86bc94eb6aa4b5f4b5a0f2e.tar.xz
nixlib-90ee01cd3dc029e1d86bc94eb6aa4b5f4b5a0f2e.tar.zst
nixlib-90ee01cd3dc029e1d86bc94eb6aa4b5f4b5a0f2e.zip
nixos: disable DHCP on ZeroTier interfaces
Diffstat (limited to 'nixos')
-rw-r--r--nixos/modules/services/networking/zerotierone.nix6
1 files changed, 5 insertions, 1 deletions
diff --git a/nixos/modules/services/networking/zerotierone.nix b/nixos/modules/services/networking/zerotierone.nix
index 6237f95b127b..e66648f683f4 100644
--- a/nixos/modules/services/networking/zerotierone.nix
+++ b/nixos/modules/services/networking/zerotierone.nix
@@ -26,6 +26,10 @@ in
         KillMode = "process";
       };
     };
-  environment.systemPackages = [ pkgs.zerotierone ];
+
+    # ZeroTier does not issue DHCP leases, but some strangers might...
+    networking.dhcpcd.denyInterfaces = [ "zt0" ];
+
+    environment.systemPackages = [ pkgs.zerotierone ];
   };
 }