NixOS module: check policy as part of switch #1149

Open
opened 2025-12-29 02:28:34 +01:00 by adam · 0 comments
Owner

Originally created by @kradalby on GitHub (Nov 16, 2025).

Not sure if this is possible, but I think it is:

When I am running nixes-rebuild switch to change to a new configuration, before accepting a new Policy, we should run a headscale policy validate and reject the whole switch if the Policy isn't valid.

This would allow admins to detect issues with the policy before the headscale instance is restarted.

We could have a flag to bypass this validation for edge cases.

Originally created by @kradalby on GitHub (Nov 16, 2025). Not sure if this is possible, but I think it is: When I am running `nixes-rebuild switch` to change to a new configuration, before accepting a new Policy, we should run a `headscale policy validate` and reject the whole switch if the Policy isn't valid. This would allow admins to detect issues with the policy before the headscale instance is restarted. We could have a flag to bypass this validation for edge cases.
adam added the no-stale-botNix labels 2025-12-29 02:28:34 +01:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/headscale#1149