···

       
168
       
 
       
        };

     

       
169
       
 
       


     

       
170
       
 
       
        localToRemote = lib.mkOption {

     

       
171
       
-
       
          description = ''Listen on local and forwards traffic from remote.'';

     

       
172
       
 
       
          type = lib.types.listOf (lib.types.str);

     

       
173
       
 
       
          default = [ ];

     

       
174
       
 
       
          example = [

     
···

       
468
       
 
       


     

       
469
       
 
       
        (lib.mapAttrsToList (name: serverCfg: {

     

       
470
       
 
       
          assertion =

     

       
471
       
-
       
            (serverCfg.tlsCertificate == null && serverCfg.tlsKey == null)

     

       
472
       
-
       
            || (serverCfg.tlsCertificate != null && serverCfg.tlsKey != null);

     

       
0
       
 
       

     

       
473
       
 
       
          message = ''

     

       
474
       
-
       
            services.wstunnel.servers."${name}".tlsCertificate and services.wstunnel.servers."${name}".tlsKey need to be set together.

     

       
475
       
 
       
          '';

     

       
476
       
 
       
        }) cfg.servers)

     

       
477
       
 
       
      ++

     

···

       
168
       
 
       
        };

     

       
169
       
 
       


     

       
170
       
 
       
        localToRemote = lib.mkOption {

     

       
171
       
+
       
          description = "Listen on local and forwards traffic from remote.";

     

       
172
       
 
       
          type = lib.types.listOf (lib.types.str);

     

       
173
       
 
       
          default = [ ];

     

       
174
       
 
       
          example = [

     
···

       
468
       
 
       


     

       
469
       
 
       
        (lib.mapAttrsToList (name: serverCfg: {

     

       
470
       
 
       
          assertion =

     

       
471
       
+
       
            serverCfg.enableHTTPS

     

       
472
       
+
       
            ->

     

       
473
       
+
       
              (serverCfg.useACMEHost != null) || (serverCfg.tlsCertificate != null && serverCfg.tlsKey != null);

     

       
474
       
 
       
          message = ''

     

       
475
       
+
       
            If services.wstunnel.servers."${name}".enableHTTPS is set to true, either services.wstunnel.servers."${name}".useACMEHost or both services.wstunnel.servers."${name}".tlsKey and services.wstunnel.servers."${name}".tlsCertificate need to be set.

     

       
476
       
 
       
          '';

     

       
477
       
 
       
        }) cfg.servers)

     

       
478
       
 
       
      ++