nixos/gonic: allow gonic to perform non-local DNS resolution

Gonic accesses external services (e.g. Listenbrainz or last.FM) for scrobbling, but it was previously not allowed to read `/etc/resolv.conf`. This had the effect that, unless a local resolver was configured on the system, any connection attempt would fail due to DNS resolution being unavailable.
2023-10-02 01:05:00 +03:00
parent 8345d28ec7
commit 259d112c05
1 changed files with 1 additions and 0 deletions
@@ -57,6 +57,7 @@ in
        ReadWritePaths = "";
        BindReadOnlyPaths = [
          # gonic can access scrobbling services
+          "-/etc/resolv.conf"
          "-/etc/ssl/certs/ca-certificates.crt"
          builtins.storeDir
          cfg.settings.podcast-path