1{ config, pkgs, lib, ... }:
2
3let
4 cfg = config.programs.iftop;
5in {
6 options = {
7 programs.iftop.enable = lib.mkEnableOption "iftop + setcap wrapper";
8 };
9 config = lib.mkIf cfg.enable {
10 environment.systemPackages = [ pkgs.iftop ];
11 security.wrappers.iftop = {
12 owner = "root";
13 group = "root";
14 capabilities = "cap_net_raw+p";
15 source = "${pkgs.iftop}/bin/iftop";
16 };
17 };
18}