74295866f5
This is broken because it requires restarting applications to see new
NSS modules. The proper way to handle NSS modules is through nscd.
See commit 554ae9908b.
65 lines
1.7 KiB
Nix
65 lines
1.7 KiB
Nix
# Configuration for the Name Service Switch (/etc/nsswitch.conf).
|
|
|
|
{ config, pkgs, ... }:
|
|
|
|
with pkgs.lib;
|
|
|
|
let
|
|
|
|
options = {
|
|
|
|
# NSS modules. Hacky!
|
|
system.nssModules = mkOption {
|
|
internal = true;
|
|
default = [];
|
|
description = "
|
|
Search path for NSS (Name Service Switch) modules. This allows
|
|
several DNS resolution methods to be specified via
|
|
<filename>/etc/nsswitch.conf</filename>.
|
|
";
|
|
merge = mergeListOption;
|
|
apply = list:
|
|
let
|
|
list2 =
|
|
list
|
|
# !!! this should be in the LDAP module
|
|
++ optional config.users.ldap.enable pkgs.nss_ldap;
|
|
in {
|
|
list = list2;
|
|
path = makeLibraryPath list2;
|
|
};
|
|
};
|
|
|
|
};
|
|
|
|
inherit (config.services.avahi) nssmdns;
|
|
|
|
in
|
|
|
|
{
|
|
require = [ options ];
|
|
|
|
environment.etc =
|
|
[ # Name Service Switch configuration file. Required by the C library.
|
|
# !!! Factor out the mdns stuff. The avahi module should define
|
|
# an option used by this module.
|
|
{ source = pkgs.writeText "nsswitch.conf"
|
|
''
|
|
passwd: files ldap
|
|
group: files ldap
|
|
shadow: files ldap
|
|
hosts: files ${optionalString nssmdns "mdns_minimal [NOTFOUND=return]"} dns ${optionalString nssmdns "mdns"} myhostname
|
|
networks: files dns
|
|
ethers: files
|
|
services: files
|
|
protocols: files
|
|
'';
|
|
target = "nsswitch.conf";
|
|
}
|
|
];
|
|
|
|
# Use nss-myhostname to ensure that our hostname always resolves to
|
|
# a valid IP address. It returns all locally configured IP
|
|
# addresses, or ::1 and 127.0.0.2 as fallbacks.
|
|
system.nssModules = [ pkgs.nss_myhostname ];
|
|
}
|