commit b09d036342d59af60fb5d6ac51296e07961818d9 · pyrox.dev/nixpkgs

pyrox.dev / nixpkgs

lol

Strongswan after network-online instead of network

The systemd service file shipped with strongswan has strongswan started after `network-online`. It turns out that this is for good reason: failure to connect on boot otherwise.

See this thread on the mailing list, which my colleague initiated after finding that our NixOS strongswan config wouldn't connect on boot:
https://lists.strongswan.org/pipermail/users/2017-January/010359.html

Tested on a local config (which has the strongswan service config overridden).

Falco Peijnenburg 8 years ago b09d0363 c4783a98

options

unified split

Changed files

+1 -1

nixos

modules

services

networking

strongswan.nix

+1 -1

nixos/modules/services/networking/strongswan.nix

···

       120
       120
        
             wantedBy = [ "multi-user.target" ];

     

       121
       121
        
             path = with pkgs; [ kmod iproute iptables utillinux ]; # XXX Linux

     

       122
       122
        
             wants = [ "keys.target" ];

     

       123
       123
       -
             after = [ "network.target" "keys.target" ];

     

       123
       123
       +
             after = [ "network-online.target" "keys.target" ];

     

       124
       124
        
             environment = {

     

       125
       125
        
               STRONGSWAN_CONF = strongswanConf { inherit setup connections ca secrets; };

     

       126
       126
        
             };