nixos/nginx: don't disable IPC (#360008)
This commit is contained in:
@@ -1305,8 +1305,7 @@ in
|
||||
# System Call Filtering
|
||||
SystemCallArchitectures = "native";
|
||||
SystemCallFilter = [ "~@cpu-emulation @debug @keyring @mount @obsolete @privileged @setuid" ]
|
||||
++ optional cfg.enableQuicBPF [ "bpf" ]
|
||||
++ optionals ((cfg.package != pkgs.tengine) && (cfg.package != pkgs.openresty) && (!lib.any (mod: (mod.disableIPC or false)) cfg.package.modules)) [ "~@ipc" ];
|
||||
++ optional cfg.enableQuicBPF [ "bpf" ];
|
||||
};
|
||||
};
|
||||
|
||||
|
||||
@@ -439,7 +439,6 @@ let self = {
|
||||
};
|
||||
|
||||
inputs = [ curl geoip libmodsecurity libxml2 lmdb yajl ];
|
||||
disableIPC = true;
|
||||
|
||||
meta = with lib; {
|
||||
description = "Open source, cross platform web application firewall (WAF)";
|
||||
|
||||
Reference in New Issue
Block a user