From d34e5a08e3fdc5f2247a41c42ed7c30988f2b89c Mon Sep 17 00:00:00 2001
From: Mark Nipper <nipsy@bitgnome.net>
Date: Wed, 12 Jun 2024 00:39:43 -0700
Subject: Fix deprecated option

---
 hosts/darkstar/default.nix | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

(limited to 'hosts/darkstar/default.nix')

diff --git a/hosts/darkstar/default.nix b/hosts/darkstar/default.nix
index 5ae8ada..1299eae 100644
--- a/hosts/darkstar/default.nix
+++ b/hosts/darkstar/default.nix
@@ -42,9 +42,6 @@
     hostName = "darkstar";
     defaultGateway = "192.168.1.1";
     domain = "bitgnome.net";
-    firewall.extraCommands = ''
-      ${pkgs.nftables}/bin/nft -f ${config.sops.secrets."nftables/ssh".path}
-    '';
     interfaces = {
       enp116s0 = {
         ipv4.addresses = [
@@ -62,7 +59,12 @@
     #  externalInterface = "vlan201";
     #  internalInterfaces = [ "enp116s0" ];
     #};
-    nftables.enable = true;
+    nftables = {
+      enable = true;
+      preCheckRuleset = ''
+        ${pkgs.nftables}/bin/nft -f ${config.sops.secrets."nftables/ssh".path}
+      '';
+    };
     #useDHCP = false;
     vlans = {
       vlan201 = { id=201; interface="enp117s0"; };
-- 
cgit v1.2.3