mirror of
https://github.com/LnL7/nix-darwin.git
synced 2025-03-09 02:07:01 +00:00
b97c235e37
These help `nix-munge-doc` automate more of the Markdown conversion process. See the following nixpkgs commits for explanations of many of these changes: *275a34e0d8*694d5b19d3*f1d39b6d61*16102dce2fI couldn't think of any particularly good way to format the `system.defaults` breadcrumbs, so I just made them standalone paragraphs. They weren't rendering correctly in DocBook anyway.
74 lines
1.9 KiB
Nix
74 lines
1.9 KiB
Nix
{ config, lib, ... }:
|
|
|
|
with lib;
|
|
|
|
{
|
|
options = {
|
|
system.defaults.alf.globalstate = mkOption {
|
|
type = types.nullOr types.int;
|
|
default = null;
|
|
description = ''
|
|
Apple menu > System Preferences > Security and Privacy > Firewall
|
|
|
|
Enable the internal firewall to prevent unauthorised applications, programs
|
|
and services from accepting incoming connections.
|
|
|
|
0 = disabled
|
|
1 = enabled
|
|
2 = blocks all connections except for essential services
|
|
'';
|
|
};
|
|
|
|
system.defaults.alf.allowsignedenabled = mkOption {
|
|
type = types.nullOr types.int;
|
|
default = null;
|
|
description = ''
|
|
Apple menu > System Preferences > Security and Privacy > Firewall
|
|
|
|
Allows any signed Application to accept incoming requests. Default is true.
|
|
|
|
0 = disabled
|
|
1 = enabled
|
|
'';
|
|
};
|
|
|
|
system.defaults.alf.allowdownloadsignedenabled = mkOption {
|
|
type = types.nullOr types.int;
|
|
default = null;
|
|
description = ''
|
|
Apple menu > System Preferences > Security and Privacy > Firewall
|
|
|
|
Allows any downloaded Application that has been signed to accept incoming requests. Default is 0.
|
|
|
|
0 = disabled
|
|
1 = enabled
|
|
'';
|
|
};
|
|
|
|
system.defaults.alf.loggingenabled = mkOption {
|
|
type = types.nullOr types.int;
|
|
default = null;
|
|
description = ''
|
|
Apple menu > System Preferences > Security and Privacy > Firewall
|
|
|
|
Enable logging of requests made to the firewall. Default is 0.
|
|
|
|
0 = disabled
|
|
1 = enabled
|
|
'';
|
|
};
|
|
|
|
system.defaults.alf.stealthenabled = mkOption {
|
|
type = types.nullOr types.int;
|
|
default = null;
|
|
description = ''
|
|
Apple menu > System Preferences > Security and firewall
|
|
|
|
Drops incoming requests via ICMP such as ping requests. Default is 0.
|
|
|
|
0 = disabled
|
|
1 = enabled
|
|
'';
|
|
};
|
|
};
|
|
}
|