nixos/firewalld: convert bool settings to yes/no (#502926)

{

  config,

  lib,

  pkgs,

  ...

}:

let

  cfg = config.services.firewalld;

  format = pkgs.formats.keyValue { };

  inherit (lib) mkOption;

  inherit (lib.types)

    attrsOf

    bool

    commas

    either

    enum

    nonEmptyStr

    oneOf

    separatedString

    submodule

    ;

    '';

    default = { };

    type = submodule {

      freeformType = format.type;

      freeformType = attrsOf (oneOf [

        bool

        nonEmptyStr

      ]);

      options = {

        DefaultZone = mkOption {

          type = nonEmptyStr;

      }

    ];

    environment.etc."firewalld/firewalld.conf" = {

      source = format.generate "firewalld.conf" cfg.settings;

    };

    environment.etc."firewalld/firewalld.conf".text = lib.concatMapAttrsStringSep "\n" (

      k: v: "${k}=${if lib.isBool v then lib.boolToYesNo v else v}"

    ) cfg.settings;

  };

}