diff options
| author | Raphael Robatsch <raphael-git@tapesoftware.net> | 2022-12-03 09:31:53 +0000 |
|---|---|---|
| committer | Raphael Robatsch <raphael-git@tapesoftware.net> | 2022-12-03 10:32:38 +0100 |
| commit | 9f874dd95e4375a86daa4dc5251fa79de890ab5b (patch) | |
| tree | b3bb560b17e8532d969f639ae3f171b6e4e67c7f /nixos/modules/system | |
| parent | b72b8b94cf0c012b0252a9100a636cad69696666 (diff) | |
nixos/tests/initrd-network-openvpn: fix
- The default cipher is BF-CBC, which openvpn refuses to use by default. Switched to AES-256-CBC. - openvpn does not require an external "ip" executable anymore, and does not support the "ipconfig" option by default, so remove that option.
Diffstat (limited to 'nixos/modules/system')
| -rw-r--r-- | nixos/modules/system/boot/initrd-openvpn.nix | 5 |
1 files changed, 1 insertions, 4 deletions
diff --git a/nixos/modules/system/boot/initrd-openvpn.nix b/nixos/modules/system/boot/initrd-openvpn.nix index b41e7524320e2..cbc61d55d6bb3 100644 --- a/nixos/modules/system/boot/initrd-openvpn.nix +++ b/nixos/modules/system/boot/initrd-openvpn.nix @@ -68,11 +68,8 @@ in $out/bin/openvpn --show-gateway ''; - # Add `iproute /bin/ip` to the config, to ensure that openvpn - # is able to set the routes boot.initrd.network.postCommands = '' - (cat /etc/initrd.ovpn; echo -e '\niproute /bin/ip') | \ - openvpn /dev/stdin & + openvpn /etc/initrd.ovpn & ''; }; |