nixos/public-inbox: bind key and cert paths

Otherwise, these can't be accessed by the service.
2025-01-21 13:51:11 +01:00
parent eb00bbcdaa
commit e1996d7bda
1 changed files with 4 additions and 0 deletions
@@ -81,6 +81,10 @@ let
            "${config.i18n.glibcLocales}"
          ]
          ++ mapAttrsToList (name: inbox: inbox.description) cfg.inboxes
+          ++ filter (x: x != null) [
+            cfg.${proto}.cert or null
+            cfg.${proto}.key or null
+          ]
          ++
            # Without confinement the whole Nix store
            # is made available to the service