nixos/paperless-ng: allow using postgresql via a unix socket

2021-08-23 22:44:36 +02:00
parent 233d204fba
commit fa80ed695b
1 changed files with 2 additions and 1 deletions
@@ -29,6 +29,7 @@ let
      "-/etc/nsswitch.conf"
      "-/etc/hosts"
      "-/etc/localtime"
+      "-/run/postgresql"
    ];
    BindPaths = [
      cfg.consumptionDir
@@ -60,7 +61,7 @@ let
    ProtectKernelModules = true;
    ProtectKernelTunables = true;
    ProtectProc = "invisible";
-    RestrictAddressFamilies = [ "AF_INET" "AF_INET6" ];
+    RestrictAddressFamilies = [ "AF_UNIX" "AF_INET" "AF_INET6" ];
    RestrictNamespaces = true;
    RestrictRealtime = true;
    RestrictSUIDSGID = true;