From 22e83d26673160bc7ad6f5a36b9ee01373806cd8 Mon Sep 17 00:00:00 2001
From: Leon Schuermann <leon.git@is.currently.online>
Date: Tue, 16 Jan 2018 11:40:16 +0700
Subject: [PATCH] openvpn: add warning about world-readable credentials

---
 nixos/modules/services/networking/openvpn.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/nixos/modules/services/networking/openvpn.nix b/nixos/modules/services/networking/openvpn.nix
index 8a059f60954..7a96b673c51 100644
--- a/nixos/modules/services/networking/openvpn.nix
+++ b/nixos/modules/services/networking/openvpn.nix
@@ -171,6 +171,8 @@ in
             description = ''
               This option can be used to store the username / password credentials
               with the "auth-user-pass" authentication method.
+
+              WARNING: Using this option will put the credentials WORLD-READABLE in the Nix store!
             '';
             type = types.nullOr (types.submodule {