pyrox.dev / nixpkgs
lol
fork atom

nixos/acme: make address families in systemd service less restrictive (#357124)

Emily 60b321b6 053cdd71

options
unified split
Changed files
+2
nixos
modules
security
acme
default.nix
+2
nixos/modules/security/acme/default.nix 
···

       
87

       
87

       
 

       
    RestrictAddressFamilies = [


     

       
88

       
88

       
 

       
      "AF_INET"


     

       
89

       
89

       
 

       
      "AF_INET6"


     

       

       
90

       
+

       
      "AF_UNIX"


     

       

       
91

       
+

       
      "AF_NETLINK"


     

       
90

       
92

       
 

       
    ];


     

       
91

       
93

       
 

       
    RestrictNamespaces = true;


     

       
92

       
94

       
 

       
    RestrictRealtime = true;