nixos/renovate: allow AF_UNIX access

renovate can update nix dependencies, which results in nix trying to communicate with the nix-daemon over a unix socket.
This commit is contained in:
Marie Ramlow 2024-07-02 20:08:05 +02:00
parent c80d01b53e
commit 787354f63c

View File

@ -128,6 +128,7 @@ in
RestrictAddressFamilies = [
"AF_INET"
"AF_INET6"
"AF_UNIX"
];
RestrictNamespaces = true;
RestrictRealtime = true;