pyrox.dev / nixpkgs
lol
fork atom

openvpn: add warning about world-readable credentials

Leon Schuermann 22e83d26 e45a06eb

options
unified split
Changed files
+2
nixos
modules
services
networking
openvpn.nix
+2
nixos/modules/services/networking/openvpn.nix 
···

       
171

       
171

       
 

       
            description = ''


     

       
172

       
172

       
 

       
              This option can be used to store the username / password credentials


     

       
173

       
173

       
 

       
              with the "auth-user-pass" authentication method.


     

       

       
174

       
+

       



     

       

       
175

       
+

       
              WARNING: Using this option will put the credentials WORLD-READABLE in the Nix store!


     

       
174

       
176

       
 

       
            '';


     

       
175

       
177

       
 

       
            type = types.nullOr (types.submodule {


     

       
176

       
178