services.usbguard.rules

The USBGuard daemon will load this as the policy rule set. As these rules are NixOS managed they are immutable and can't be changed by the IPC interface.

If you do not set this option, the USBGuard daemon will load it's policy rule set from the option configured in services.usbguard.ruleFile.

Running usbguard generate-policy as root will generate a config for your currently plugged in devices.

For more details see usbguard-rules.conf(5).