From 95f1ebd2aa72e9184c341f43753e07da097b0f4c Mon Sep 17 00:00:00 2001
From: Morgan Jones <me@numin.it>
Date: Mon, 8 Jul 2024 01:04:15 -0700
Subject: [PATCH] nixos/nebula: loosen ProtectSystem

"strict" may be too strict for some PKCS#11 providers.
---
 nixos/modules/services/networking/nebula.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/modules/services/networking/nebula.nix b/nixos/modules/services/networking/nebula.nix
index 1a8a85c257d7..e4539f6a709b 100644
--- a/nixos/modules/services/networking/nebula.nix
+++ b/nixos/modules/services/networking/nebula.nix
@@ -241,7 +241,7 @@ in
               ProtectKernelModules = true;
               ProtectKernelTunables = true;
               ProtectProc = "invisible";
-              ProtectSystem = "strict";
+              ProtectSystem = true;
               RestrictNamespaces = true;
               RestrictSUIDSGID = true;
               User = networkId;