machine_setup/nix/kubernetes/roles/debugging/default.nix

{
  config,
  lib,
  pkgs,
  ...
}:

{
  imports = [ ];

  options.me = {
    debugging.enable = lib.mkOption {
      type = lib.types.bool;
      default = true;
      example = true;
      description = "Whether we want to install debugging.";
    };
  };

  config = lib.mkIf config.me.debugging.enable {
    environment.systemPackages = with pkgs; [
      net-tools # for netstat
      tcpdump
      e2fsprogs # mkfs.ext4
      gptfdisk # cgdisk
      arp-scan # To find devices on the network
      ldns # for drill
    ];

    # This can make debugging easier by rejecting packets instead of dropping them:
    networking.firewall.rejectPackets = true;
    # Log each rejected packet instead of just each connection.
    networking.firewall.logRefusedPackets = true;
  };
}