nixos/hosts/Tibo-NixTop/default.nix

@@ -38,6 +38,7 @@
       home-manager.enable = true;
       sops.enable = true;
       ssh.enable = true;
+      wireshark.enable = true;
     };
 
     services = {

nixos/modules/programs/default.nix

@@ -5,5 +5,6 @@
     ./sops
     ./spotify-adblock
     ./ssh
+    ./wireshark
   ];
 }

nixos/modules/programs/wireshark/default.nix

@@ -0,0 +1,23 @@
+{ config, lib, pkgs, ... }:
+
+let
+  cfg = config.sisyphus.programs.wireshark;
+in {
+  options.sisyphus.programs.wireshark.enable = lib.mkEnableOption "Wireshark";
+
+  config = lib.mkIf cfg.enable {
+    environment.systemPackages = with pkgs; [
+      wireshark
+    ];
+
+    programs.wireshark = {
+      enable = true;
+      dumpcap.enable = true;
+      usbmon.enable = false;
+    };
+
+    sisyphus.users.wantedGroups = [
+      "wireshark"
+    ];
+  };
+}