nixos/renovate: allow AF_UNIX access

renovate can update nix dependencies, which results in nix trying to communicate with the nix-daemon over a unix socket.
2024-07-02 20:09:12 +02:00
parent c80d01b53e
commit 787354f63c
1 changed files with 1 additions and 0 deletions
@@ -128,6 +128,7 @@ in
        RestrictAddressFamilies = [
          "AF_INET"
          "AF_INET6"
+          "AF_UNIX"
        ];
        RestrictNamespaces = true;
        RestrictRealtime = true;