nix/8.nix-darwin
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

systems.defaults.alf: deprecate

Browse source
This commit is contained in:
Sizhe Zhao 2025-06-22 20:07:10 +08:00
parent caa59bf50a
commit f2457a22c8
No known key found for this signature in database
GPG key ID: ED1807251A7DA08F
2 changed files with 23 additions and 74 deletions
Download patch file Download diff file Expand all files Collapse all files

3
modules/system/defaults-write.nix
View file

@ -20,7 +20,6 @@ let
dockFiltered = (builtins.removeAttrs cfg.dock ["expose-group-by-app"]);
# defaults
alf = defaultsToList "/Library/Preferences/com.apple.alf" cfg.alf;
loginwindow = defaultsToList "/Library/Preferences/com.apple.loginwindow" cfg.loginwindow;
smb = defaultsToList "/Library/Preferences/SystemConfiguration/com.apple.smb.server" cfg.smb;
SoftwareUpdate = defaultsToList "/Library/Preferences/com.apple.SoftwareUpdate" cfg.SoftwareUpdate;
@ -89,7 +88,6 @@ in
];
system.activationScripts.defaults.text = mkIfLists [
alf
loginwindow
smb
SoftwareUpdate
@ -98,7 +96,6 @@ in
''
# Set defaults
echo >&2 "system defaults..."
${concatStringsSep "\n" alf}
${concatStringsSep "\n" loginwindow}
${concatStringsSep "\n" smb}
${concatStringsSep "\n" SoftwareUpdate}

94
modules/system/defaults/alf.nix
View file

@ -1,74 +1,26 @@
{ config, lib, ... }:
with lib;
{ lib, ... }:
let
path = [
"system"
"defaults"
"alf"
];
in
{
options = {
system.defaults.alf.globalstate = mkOption {
type = types.nullOr types.int;
default = null;
description = ''
Apple menu > System Preferences > Security and Privacy > Firewall
Enable the internal firewall to prevent unauthorised applications, programs
and services from accepting incoming connections.
0 = disabled
1 = enabled
2 = blocks all connections except for essential services
'';
};
system.defaults.alf.allowsignedenabled = mkOption {
type = types.nullOr types.int;
default = null;
description = ''
Apple menu > System Preferences > Security and Privacy > Firewall
Allows any signed Application to accept incoming requests. Default is true.
0 = disabled
1 = enabled
'';
};
system.defaults.alf.allowdownloadsignedenabled = mkOption {
type = types.nullOr types.int;
default = null;
description = ''
Apple menu > System Preferences > Security and Privacy > Firewall
Allows any downloaded Application that has been signed to accept incoming requests. Default is 0.
0 = disabled
1 = enabled
'';
};
system.defaults.alf.loggingenabled = mkOption {
type = types.nullOr types.int;
default = null;
description = ''
Apple menu > System Preferences > Security and Privacy > Firewall
Enable logging of requests made to the firewall. Default is 0.
0 = disabled
1 = enabled
'';
};
system.defaults.alf.stealthenabled = mkOption {
type = types.nullOr types.int;
default = null;
description = ''
Apple menu > System Preferences > Security and firewall
Drops incoming requests via ICMP such as ping requests. Default is 0.
0 = disabled
1 = enabled
'';
};
};
imports = [
(lib.mkRemovedOptionModule (path ++ [ "globalstate" ])
"Use `networking.applicationFirewall.enable' and `networking.applicationFirewall.blockAllIncoming' instead."
)
(lib.mkRemovedOptionModule (
path ++ [ "allowsignedenabled" ]
) "Use `networking.applicationFirewall.allowSigned' instead.")
(lib.mkRemovedOptionModule (
path ++ [ "allowdownloadsignedenabled" ]
) "Use `networking.applicationFirewall.allowSignedApp' instead.")
(lib.mkRemovedOptionModule (path ++ [ "loggingenabled" ]) "It's no longer necessary.")
(lib.mkRemovedOptionModule (
path ++ [ "stealthenabled" ]
) "Use `networking.applicationFirewall.enableStealthMode' instead.")
];
}