pyrox.dev
1{
2 config,
3 lib,
4 pkgs,
5 ...
6}:
7
8let
9 cfg = config.programs.nexttrace;
10
11in
12{
13 options = {
14 programs.nexttrace = {
15 enable = lib.mkEnableOption "Nexttrace to the global environment and configure a setcap wrapper for it";
16 package = lib.mkPackageOption pkgs "nexttrace" { };
17 };
18 };
19
20 config = lib.mkIf cfg.enable {
21 environment.systemPackages = [ cfg.package ];
22
23 security.wrappers.nexttrace = {
24 owner = "root";
25 group = "root";
26 capabilities = "cap_net_raw,cap_net_admin+eip";
27 source = "${cfg.package}/bin/nexttrace";
28 };
29 };
30}