oqyude/nixos
1
0
Fork 0
mirror of https://github.com/oqyude/nixos.git synced 2026-10-11 22:37:25 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(vds-nftables): remove allowPing — not a top-level networking option

Browse Source 
networking.allowPing was a top-level networking option when
firewall.enable = true. With firewall.enable = false (T3 Option A),
the option no longer exists at the networking level. ICMP is now
handled by the nftables ruleset directly
().

Rebuild error: 'The option networking.allowPing does not exist.
Definition values: networking.domain, networking.vlans, networking.wicd.'

Fix: remove the line. No behavior change — ICMP is still accepted
via nftables.
This commit is contained in:
oqyude
2026-10-10 16:47:02 +03:00
parent 57967861c1
commit 3deaa75f5c
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
configurations/vds.nix
+4 -1
View File
@@ -89,7 +89,10 @@
firewall.enable = false; firewall.enable = false;
firewall.allowedTCPPorts = lib.mkForce [ ]; firewall.allowedTCPPorts = lib.mkForce [ ];
firewall.interfaces = lib.mkForce { }; firewall.interfaces = lib.mkForce { };
allowPing = true; # allowPing removed 2026-10-10 (T3 Option A): with firewall.enable = false,
# `networking.allowPing` no longer exists as a top-level option. ICMP
# accept is now handled by the nftables ruleset below
# (`ip protocol icmp accept`).
nftables = { nftables = {
enable = true; enable = true;
ruleset = '' ruleset = ''