···

       
532
       
 
       
      </listitem>

     

       
533
       
 
       
      <listitem>

     

       
534
       
 
       
        <para>

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
535
       
 
       
          The module <literal>services.headscale</literal> was

     

       
536
       
 
       
          refactored to be compliant with

     

       
537
       
 
       
          <link xlink:href="https://github.com/NixOS/rfcs/blob/master/rfcs/0042-config-option.md">RFC

     

···

       
532
       
 
       
      </listitem>

     

       
533
       
 
       
      <listitem>

     

       
534
       
 
       
        <para>

     

       
535
       
+
       
          <literal>services.dhcpcd</literal> service now don’t solicit

     

       
536
       
+
       
          or accept IPv6 Router Advertisements on interfaces that use

     

       
537
       
+
       
          static IPv6 addresses.

     

       
538
       
+
       
        </para>

     

       
539
       
+
       
      </listitem>

     

       
540
       
+
       
      <listitem>

     

       
541
       
+
       
        <para>

     

       
542
       
 
       
          The module <literal>services.headscale</literal> was

     

       
543
       
 
       
          refactored to be compliant with

     

       
544
       
 
       
          <link xlink:href="https://github.com/NixOS/rfcs/blob/master/rfcs/0042-config-option.md">RFC

     

···

       
134
       
 
       


     

       
135
       
 
       
- `services.chronyd` is now started with additional systemd sandbox/hardening options for better security.

     

       
136
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
137
       
 
       
- The module `services.headscale` was refactored to be compliant with [RFC 0042](https://github.com/NixOS/rfcs/blob/master/rfcs/0042-config-option.md). To be precise, this means that the following things have changed:

     

       
138
       
 
       


     

       
139
       
 
       
  - Most settings has been migrated under [services.headscale.settings](#opt-services.headscale.settings) which is an attribute-set that

     

···

       
134
       
 
       


     

       
135
       
 
       
- `services.chronyd` is now started with additional systemd sandbox/hardening options for better security.

     

       
136
       
 
       


     

       
137
       
+
       
- `services.dhcpcd` service now don't solicit or accept IPv6 Router Advertisements on interfaces that use static IPv6 addresses.

     

       
138
       
+
       


     

       
139
       
 
       
- The module `services.headscale` was refactored to be compliant with [RFC 0042](https://github.com/NixOS/rfcs/blob/master/rfcs/0042-config-option.md). To be precise, this means that the following things have changed:

     

       
140
       
 
       


     

       
141
       
 
       
  - Most settings has been migrated under [services.headscale.settings](#opt-services.headscale.settings) which is an attribute-set that

     

···

       
33
       
 
       
    (if !config.networking.useDHCP && enableDHCP then

     

       
34
       
 
       
      map (i: i.name) (filter (i: i.useDHCP == true) interfaces) else null);

     

       
35
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
36
       
 
       
  # Config file adapted from the one that ships with dhcpcd.

     

       
37
       
 
       
  dhcpcdConf = pkgs.writeText "dhcpcd.conf"

     

       
38
       
 
       
    ''

     
···

       
75
       
 
       
      ''}

     

       
76
       
 
       


     

       
77
       
 
       
      ${cfg.extraConfig}

     

       
0
       
 
       

     

       
0
       
 
       

     

       
78
       
 
       
    '';

     

       
79
       
 
       


     

       
80
       
 
       
  exitHook = pkgs.writeText "dhcpcd.exit-hook"

     

···

       
33
       
 
       
    (if !config.networking.useDHCP && enableDHCP then

     

       
34
       
 
       
      map (i: i.name) (filter (i: i.useDHCP == true) interfaces) else null);

     

       
35
       
 
       


     

       
36
       
+
       
  staticIPv6Addresses = map (i: i.name) (filter (i: i.ipv6.addresses != [ ]) interfaces);

     

       
37
       
+
       


     

       
38
       
+
       
  noIPv6rs = concatStringsSep "\n" (map (name: ''

     

       
39
       
+
       
    interface ${name}

     

       
40
       
+
       
    noipv6rs

     

       
41
       
+
       
  '') staticIPv6Addresses);

     

       
42
       
+
       


     

       
43
       
 
       
  # Config file adapted from the one that ships with dhcpcd.

     

       
44
       
 
       
  dhcpcdConf = pkgs.writeText "dhcpcd.conf"

     

       
45
       
 
       
    ''

     
···

       
82
       
 
       
      ''}

     

       
83
       
 
       


     

       
84
       
 
       
      ${cfg.extraConfig}

     

       
85
       
+
       


     

       
86
       
+
       
      ${optionalString config.networking.enableIPv6 noIPv6rs}

     

       
87
       
 
       
    '';

     

       
88
       
 
       


     

       
89
       
 
       
  exitHook = pkgs.writeText "dhcpcd.exit-hook"