pyrox.dev / nixpkgs
lol
fork atom

Merge pull request #216504 from ncfavier/unbound-state-dir-writable

nixos/unbound: make stateDir writable

Naïm Favier 129b6f78 dd6b0589

options
unified split
Changed files
+2
nixos
modules
services
networking
unbound.nix
+2
nixos/modules/services/networking/unbound.nix 
···

       
286

       
286

       
 

       
        LockPersonality = true;


     

       
287

       
287

       
 

       
        RestrictSUIDSGID = true;


     

       
288

       
288

       
 

       



     

       

       
289

       
+

       
        ReadWritePaths = [ cfg.stateDir ];


     

       

       
290

       
+

       



     

       
289

       
291

       
 

       
        Restart = "on-failure";


     

       
290

       
292

       
 

       
        RestartSec = "5s";


     

       
291

       
293

       
 

       
      };