nixos-config/nix/verify/modules/closedPorts.nix

{ lib, ... }:
with lib;
with types;
{
  # todo add remote command option

  options.verify.closed = mkOption {
    default = { };
    example = {
      public = {
        host = "example.com";
        ports = {
          arr = [
            7878
            8989
            8686
          ];
        };
      };
    };
    description = ''
      Verify that ports the defined ports are closed for a specific interface.
      Verification is done by rustscan.
    '';
    type = attrsOf (submodule {
      options = {
        host = mkOption {
          type = str;
          description = ''
            The host against which the rustscan will be done.
            Needed because we have more than interface on the machine.
          '';
        };
        ports = mkOption {
          default = { };
          type = attrsOf (listOf int);
          description = ''
            service -> [port, ... ]
            Ports that should be verified as beeing closed.
          '';
        };
      };
    });
  };

}