From 9f2a05224c5b927304aa571ff0d905bb5d565a89 Mon Sep 17 00:00:00 2001
From: lassulus <git@lassul.us>
Date: Fri, 21 Feb 2025 00:55:57 +0100
Subject: [PATCH] nixos/hedgedoc: add fchown to SystemCallFilter to fix
 filesystem backend

---
 nixos/modules/services/web-apps/hedgedoc.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixos/modules/services/web-apps/hedgedoc.nix b/nixos/modules/services/web-apps/hedgedoc.nix
index 817114cb452c..587cf10f9c53 100644
--- a/nixos/modules/services/web-apps/hedgedoc.nix
+++ b/nixos/modules/services/web-apps/hedgedoc.nix
@@ -327,6 +327,7 @@ in
           "@system-service"
           "~@privileged @obsolete"
           "@pkey"
+          "fchown" # needed for filesystem image backend
         ];
         UMask = "0007";
       };