nixos/acme: make address families in systemd service less restrictive (#357124)

2024-11-19 10:36:41 +00:00
parent 053cdd713e d9bf91700e
commit 60b321b6a3
1 changed files with 2 additions and 0 deletions
@@ -87,6 +87,8 @@ let
    RestrictAddressFamilies = [
      "AF_INET"
      "AF_INET6"
+      "AF_UNIX"
+      "AF_NETLINK"
    ];
    RestrictNamespaces = true;
    RestrictRealtime = true;