Merge pull request #119929 from expipiplus1/patch-3

modules.matrix-appservice-irc: allow connecting to unix sockets
3 years ago · 1c4f6dd00e
parent ac507707f0 03ea3ba1ed
commit 1c4f6dd00e
1 changed files with 2 additions and 1 deletions
--- a/nixos/modules/services/misc/matrix-appservice-irc.nix
+++ b/nixos/modules/services/misc/matrix-appservice-irc.nix
@ -214,7 +214,8 @@ in {
        PrivateMounts = true;
        SystemCallFilter = "~@aio @clock @cpu-emulation @debug @keyring @memlock @module @mount @obsolete @raw-io @setuid @swap";
        SystemCallArchitectures = "native";
-        RestrictAddressFamilies = "AF_INET AF_INET6";
+        # AF_UNIX is required to connect to a postgres socket.
+        RestrictAddressFamilies = "AF_UNIX AF_INET AF_INET6";
      };
    };