nixos/radicale: Allow AF_UNIX for systemd log

radicale tries to connect to the systemd unix socket for logging. This currently fails because it is not allowed to open sockets, then it falls back to logging to stdout (printing a warning). Allow radical to open unix sockets to fix this. This gives slightly better logging experience (e.g. errors are marked red when sent through the systemd log socket).
2025-01-15 01:09:54 +01:00
parent 9abb87b552
commit 8f4bc44f88
1 changed files with 1 additions and 0 deletions
@@ -205,6 +205,7 @@ in
        RestrictAddressFamilies = [
          "AF_INET"
          "AF_INET6"
+          "AF_UNIX" # To log with systemd
        ];
        RestrictNamespaces = true;
        RestrictRealtime = true;