From 8f4bc44f880f2251ac9cd7447ba7f02eaba10272 Mon Sep 17 00:00:00 2001
From: Flakebi <flakebi@t-online.de>
Date: Wed, 15 Jan 2025 01:09:54 +0100
Subject: [PATCH] nixos/radicale: Allow AF_UNIX for systemd log

radicale tries to connect to the systemd unix socket for logging. This
currently fails because it is not allowed to open sockets, then it falls
back to logging to stdout (printing a warning).

Allow radical to open unix sockets to fix this. This gives slightly
better logging experience (e.g. errors are marked red when sent through
the systemd log socket).
---
 nixos/modules/services/networking/radicale.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixos/modules/services/networking/radicale.nix b/nixos/modules/services/networking/radicale.nix
index d210efe14b3c..76e74e07a4e5 100644
--- a/nixos/modules/services/networking/radicale.nix
+++ b/nixos/modules/services/networking/radicale.nix
@@ -205,6 +205,7 @@ in
         RestrictAddressFamilies = [
           "AF_INET"
           "AF_INET6"
+          "AF_UNIX" # To log with systemd
         ];
         RestrictNamespaces = true;
         RestrictRealtime = true;