From 42eb3d422ab90fa229840ea625ef2c2534389eee Mon Sep 17 00:00:00 2001 From: Chris Moultrie <821688+tebriel@users.noreply.github.com> Date: Mon, 28 Jul 2025 18:22:39 -0400 Subject: [PATCH 1/2] komga: bugfix allow komga access to /proc/mounts by service New Java call to the Files.getFileStore uses /proc/mounts so we can no longer hav ProcSubset as only "pid". --- nixos/modules/services/web-apps/komga.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nixos/modules/services/web-apps/komga.nix b/nixos/modules/services/web-apps/komga.nix index ed30343f1c07..bca9d167ac49 100644 --- a/nixos/modules/services/web-apps/komga.nix +++ b/nixos/modules/services/web-apps/komga.nix @@ -144,7 +144,7 @@ in PrivateTmp = true; ProtectProc = "invisible"; ProtectClock = true; - ProcSubset = "pid"; + ProcSubset = "all"; PrivateUsers = true; PrivateDevices = true; ProtectHostname = true; From 5983d4bed37f3171c0cf247cae015f8860282de4 Mon Sep 17 00:00:00 2001 From: Chris Moultrie <821688+tebriel@users.noreply.github.com> Date: Tue, 29 Jul 2025 22:28:04 -0400 Subject: [PATCH 2/2] web-apps/komga: add tebriel to maintainers --- nixos/modules/services/web-apps/komga.nix | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/nixos/modules/services/web-apps/komga.nix b/nixos/modules/services/web-apps/komga.nix index bca9d167ac49..eac2e0a23ecb 100644 --- a/nixos/modules/services/web-apps/komga.nix +++ b/nixos/modules/services/web-apps/komga.nix @@ -166,5 +166,8 @@ in }; }; - meta.maintainers = with maintainers; [ govanify ]; + meta.maintainers = with maintainers; [ + govanify + tebriel + ]; }