nixos/prosody: allow listening on port 80

Co-authored-by: mirror230469 <215964377+mirror230469@users.noreply.github.com>
2025-08-03 21:35:28 +02:00
parent e46dcd7074
commit 246e3fbf0f
1 changed files with 1 additions and 0 deletions
@@ -1000,6 +1000,7 @@ in
          ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID";
          Restart = "on-abnormal";

+          AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ];
          MemoryDenyWriteExecute = true;
          PrivateDevices = true;
          PrivateMounts = true;