diff --git a/nixos/modules/services/security/tor.nix b/nixos/modules/services/security/tor.nix index 3d5c817532e5..219458870472 100644 --- a/nixos/modules/services/security/tor.nix +++ b/nixos/modules/services/security/tor.nix @@ -1410,7 +1410,14 @@ in RootDirectoryStartOnly = true; #InaccessiblePaths = [ "-+${runDir}/root" ]; UMask = "0066"; - BindPaths = [ stateDir ]; + BindPaths = [ + stateDir + ] + ++ lib.catAttrs "unix" ( + lib.catAttrs "target" ( + lib.concatMap (onionService: onionService.map) (lib.attrValues cfg.relay.onionServices) + ) + ); BindReadOnlyPaths = [ builtins.storeDir "/etc"