reload destination -> target and module fixes

nix/module.nix

@@ -9,7 +9,7 @@ with lib; let
   hasNamespaces = cfg.namespaces != {};
   format = pkgs.formats.toml {};
   configFile = format.generate "netnsd.toml" {
-    inherit (cfg) namespaces;
+    namespace = mapAttrsToList (_: value: value) cfg.namespaces;
   };
 in {
   options.networking.netnsd = {
@@ -18,6 +18,12 @@ in {
       description = "package to use";
     };
 
+    logLevel = mkOption {
+      type = types.str;
+      default = "info";
+      description = "Log level";
+    };
+
     namespaces = mkOption {
       type = types.attrsOf (types.submodule ({name, ...}: {
         options = {
@@ -31,11 +37,11 @@ in {
               options = {
                 source = mkOption {
                   type = types.oneOf [types.port types.str];
-                  default = config.destination;
-                  defaultText = "<destination>";
+                  default = config.target;
+                  defaultText = "<target>";
                   description = "source port, address or socket outside the namespace";
                 };
-                destination = mkOption {
+                target = mkOption {
                   type = types.oneOf [types.port types.str];
                   description = "target port or address inside the namespace";
                 };
@@ -46,6 +52,7 @@ in {
         };
       }));
       description = "namespaces to setup";
+      default = {};
     };
   };
 
@@ -53,17 +60,20 @@ in {
     # symlink instead of passing `configFile` directly to netnsd to allow changing the config without changing the path
     environment.etc."netnsd/netnsd.toml".source = configFile;
 
-    systemd.services.netcsctl = {
+    systemd.services.netnsd = {
       reloadTriggers = [configFile];
 
       wantedBy = ["multi-user.target"];
+      before = ["network.target"];
+
+      environment = {
+        RUST_LOG = cfg.logLevel;
+      };
+
       serviceConfig = {
         Restart = "on-failure";
         Type = "notify-reload";
-        ExecStart = "${getExec cfg.pkg} daemon -c /etc/netnsd/netnsd.toml";
-        PrivateTmp = true;
-        ProtectSystem = "full";
-        ProtectHome = true;
+        ExecStart = "${getExe cfg.package} daemon -c /etc/netnsd/netnsd.toml";
         NoNewPrivileges = true;
       };
     };

nix/package.nix

@@ -16,4 +16,6 @@ in
     cargoLock = {
       lockFile = ../Cargo.lock;
     };
+
+    meta.mainProgram = "netnsd";
   }