3
0
Fork 0
forked from mirrors/nixpkgs

navidrome: Allow read access to /etc

This allows dns resolution in the server to work, fixing connections
to external web services on machines that don't run their own DNS
resolver.
This commit is contained in:
Andreas Fuchs 2021-12-21 22:30:45 +01:00
parent 488a5a3787
commit f993a0a27d

View file

@ -46,6 +46,7 @@ in {
ReadWritePaths = "";
BindReadOnlyPaths = [
builtins.storeDir
"/etc"
] ++ lib.optional (cfg.settings ? MusicFolder) cfg.settings.MusicFolder;
CapabilityBoundingSet = "";
RestrictAddressFamilies = [ "AF_UNIX" "AF_INET" "AF_INET6" ];