nixos/paperless-ng: allow using postgresql via a unix socket

This commit is contained in:
Leo Maroni 2021-08-23 22:30:54 +02:00
parent 233d204fba
commit fa80ed695b
No known key found for this signature in database
GPG Key ID: B1ADA545CD2CBACD

View File

@ -29,6 +29,7 @@ let
"-/etc/nsswitch.conf"
"-/etc/hosts"
"-/etc/localtime"
"-/run/postgresql"
];
BindPaths = [
cfg.consumptionDir
@ -60,7 +61,7 @@ let
ProtectKernelModules = true;
ProtectKernelTunables = true;
ProtectProc = "invisible";
RestrictAddressFamilies = [ "AF_INET" "AF_INET6" ];
RestrictAddressFamilies = [ "AF_UNIX" "AF_INET" "AF_INET6" ];
RestrictNamespaces = true;
RestrictRealtime = true;
RestrictSUIDSGID = true;