forked from mirrors/nixpkgs
navidrome: Allow read access to /etc
This allows dns resolution in the server to work, fixing connections to external web services on machines that don't run their own DNS resolver.
This commit is contained in:
parent
488a5a3787
commit
f993a0a27d
|
@ -46,6 +46,7 @@ in {
|
|||
ReadWritePaths = "";
|
||||
BindReadOnlyPaths = [
|
||||
builtins.storeDir
|
||||
"/etc"
|
||||
] ++ lib.optional (cfg.settings ? MusicFolder) cfg.settings.MusicFolder;
|
||||
CapabilityBoundingSet = "";
|
||||
RestrictAddressFamilies = [ "AF_UNIX" "AF_INET" "AF_INET6" ];
|
||||
|
|
Loading…
Reference in a new issue