From 2fc0f7bbdb5fce23446d16beed26733ed486ae6e Mon Sep 17 00:00:00 2001
From: Lemon Lam <alemonmk@users.noreply.github.com>
Date: Wed, 19 Aug 2026 10:58:22 +0800
Subject: [PATCH] nixos/warpgate: configurable advertised MySQL server version

(cherry picked from commit 441b7a7035c6c7ce1926de55f762290672b7a751)
---
 nixos/modules/services/security/warpgate.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/nixos/modules/services/security/warpgate.nix b/nixos/modules/services/security/warpgate.nix
index 3547d199cae0..50b4811e66b6 100644
--- a/nixos/modules/services/security/warpgate.nix
+++ b/nixos/modules/services/security/warpgate.nix
@@ -301,6 +301,14 @@ in
                 default = "/var/lib/warpgate/tls.key.pem";
                 type = str;
               };
+              advertised_version = mkOption {
+                description = ''
+                  The server version advertised to clients during the handshake.
+                  Warpgate can't auto-match the target's version since the target is only known after the handshake, but Warpgate's clients use it to pick a protocol dialect.
+                '';
+                default = "8.0.3-Warpgate";
+                type = str;
+              };
             };
             postgres = {
               enable = mkOption {