c4patino/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-07-06 17:13:24 -05:00
Code Issues Projects Releases Packages Wiki Activity

nixos/blocky: allow socket db connection

Browse source 
I am currently working around that with
```
settings.queryLog.target = "postgresql://blocky@127.0.0.1/blocky?sslmode=disable";
```
but it would be nice to use a socket connection instead
This commit is contained in:
Tim Häring 2026-02-20 10:08:04 +01:00
commit a142420c52
No known key found for this signature in database
GPG key ID: 51BA87AD19288CB9
1 changed files with 13 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

17
nixos/modules/services/networking/blocky.nix
View file

@ -64,10 +64,19 @@ in
ProtectKernelTunables = true;
ProtectSystem = "strict";
Restart = "on-failure";
RestrictAddressFamilies = [
"AF_INET"
"AF_INET6"
];
RestrictAddressFamilies =
let
logType = lib.attrByPath [ "settings" "queryLog" "type" ] "" cfg;
in
(lib.optional (lib.elem logType [
"mysql"
"postgresql"
"timescale"
]) "AF_UNIX")
++ [
"AF_INET"
"AF_INET6"
];
RestrictNamespaces = true;
RestrictRealtime = true;
RuntimeDirectory = "blocky";