at 24.11-pre 413 B view raw
1{ config, pkgs, lib, ... }: 2 3let 4 cfg = config.programs.iftop; 5in { 6 options = { 7 programs.iftop.enable = lib.mkEnableOption "iftop + setcap wrapper"; 8 }; 9 config = lib.mkIf cfg.enable { 10 environment.systemPackages = [ pkgs.iftop ]; 11 security.wrappers.iftop = { 12 owner = "root"; 13 group = "root"; 14 capabilities = "cap_net_raw+p"; 15 source = "${pkgs.iftop}/bin/iftop"; 16 }; 17 }; 18}