···

       
99
       
99
       
 
       
  config = mkIf cfg.enable {

     

       
100
       
100
       
 
       
    assertions = [{

     

       
101
       
101
       
 
       
      assertion = config.networking.firewall.enable == false;

     

       
102
       
102
       
-
       
      message = "You can not use nftables with services.networking.firewall.";

     

       
102
       
102
       
+
       
      message = "You can not use nftables and iptables at the same time. networking.firewall.enable must be set to false.";

     

       
103
       
103
       
 
       
    }];

     

       
104
       
104
       
 
       
    boot.blacklistedKernelModules = [ "ip_tables" ];

     

       
105
       
105
       
 
       
    environment.systemPackages = [ pkgs.nftables ];