1{
2 config,
3 pkgs,
4 lib,
5 ...
6}:
7
8let
9 cfg = config.programs.iftop;
10in
11{
12 options = {
13 programs.iftop.enable = lib.mkEnableOption "iftop and setcap wrapper for it";
14 };
15 config = lib.mkIf cfg.enable {
16 environment.systemPackages = [ pkgs.iftop ];
17 security.wrappers.iftop = {
18 owner = "root";
19 group = "root";
20 capabilities = "cap_net_raw+p";
21 source = lib.getExe pkgs.iftop;
22 };
23 };
24}