···

       
19
       
19
       
 
       
          services.pufferpanel = {

     

       
20
       
20
       
 
       
            enable = true;

     

       
21
       
21
       
 
       
            extraPackages = with pkgs; [ bash curl gawk gnutar gzip ];

     

       
22
       
22
       
-
       
            package = pkgs.buildFHSUserEnv {

     

       
22
       
22
       
+
       
            package = pkgs.buildFHSEnv {

     

       
23
       
23
       
 
       
              name = "pufferpanel-fhs";

     

       
24
       
24
       
 
       
              runScript = lib.getExe pkgs.pufferpanel;

     

       
25
       
25
       
 
       
              targetPkgs = pkgs': with pkgs'; [ icu openssl zlib ];

     
···

       
162
       
162
       
 
       
        PrivateUsers = true;

     

       
163
       
163
       
 
       
        PrivateDevices = true;

     

       
164
       
164
       
 
       
        RestrictRealtime = true;

     

       
165
       
165
       
-
       
        RestrictNamespaces = [ "user" "mnt" ]; # allow buildFHSUserEnv

     

       
165
       
165
       
+
       
        RestrictNamespaces = [ "user" "mnt" ]; # allow buildFHSEnv

     

       
166
       
166
       
 
       
        RestrictAddressFamilies = [ "AF_INET" "AF_INET6" "AF_UNIX" ];

     

       
167
       
167
       
 
       
        LockPersonality = true;

     

       
168
       
168
       
 
       
        DeviceAllow = [ "" ];