Merge pull request #135472 from em0lar/paperless-ng/postgresql

nixos/paperless-ng: allow using postgresql via a unix socket
2021-08-23 23:28:33 +02:00
parent 8056e5c346 fa80ed695b
commit 699b4f6fee
1 changed files with 2 additions and 1 deletions
@@ -29,6 +29,7 @@ let
      "-/etc/nsswitch.conf"
      "-/etc/hosts"
      "-/etc/localtime"
+      "-/run/postgresql"
    ];
    BindPaths = [
      cfg.consumptionDir
@@ -60,7 +61,7 @@ let
    ProtectKernelModules = true;
    ProtectKernelTunables = true;
    ProtectProc = "invisible";
-    RestrictAddressFamilies = [ "AF_INET" "AF_INET6" ];
+    RestrictAddressFamilies = [ "AF_UNIX" "AF_INET" "AF_INET6" ];
    RestrictNamespaces = true;
    RestrictRealtime = true;
    RestrictSUIDSGID = true;