From a0a79f493d19dd550781ea699c3af5e6f091cbb4 Mon Sep 17 00:00:00 2001 From: Vincent Ambo Date: Thu, 10 Mar 2022 17:04:16 +0200 Subject: fix(tazjin/polyanka): Apply strongswan workaround Change-Id: If2ec62923fd262922d11be16e2cb0afe6360b785 Reviewed-on: https://cl.tvl.fyi/c/depot/+/5381 Tested-by: BuildkiteCI Reviewed-by: tazjin Autosubmit: tazjin --- users/tazjin/nixos/polyanka/default.nix | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'users/tazjin/nixos') diff --git a/users/tazjin/nixos/polyanka/default.nix b/users/tazjin/nixos/polyanka/default.nix index b17a40c1027d..b02f38caec86 100644 --- a/users/tazjin/nixos/polyanka/default.nix +++ b/users/tazjin/nixos/polyanka/default.nix @@ -21,6 +21,12 @@ in nix.settings.trusted-users = [ "tazjin" ]; + # Work around strongswan 5.9.4 being incompatible with servers not + # patched against some CVE. I need this for work .. + nixpkgs.overlays = [ + depot.third_party.overlays.strongswan-workaround + ]; + fileSystems."/" = { device = "/dev/disk/by-uuid/4c51357a-1e34-4b59-b169-63af1fcdce71"; -- cgit 1.4.1