···11+# FIXME: i have disabeled this since it broke my ipv4 connections
12{
23 lib,
34 config,
···1011 # enable opportunistic TCP encryption
1112 # this is NOT a pancea, however, if the receiver supports encryption and the attacker is passive
1213 # privacy will be more plausible (but not guaranteed, unlike what the option docs suggest)
1313- networking.tcpcrypt.enable = !config.garden.profiles.server.enable;
1414+ # networking.tcpcrypt.enable = !config.garden.profiles.server.enable;
14151516 users = mkIf config.networking.tcpcrypt.enable {
1617 groups.tcpcryptd = { };