Commit 787354f6 authored by Marie Ramlow's avatar Marie Ramlow
Browse files

nixos/renovate: allow AF_UNIX access 

renovate can update nix dependencies, which results in nix trying to communicate with the nix-daemon over a unix socket.
parent c80d01b5

nixos/modules/services/misc/renovate.nix

+1 −0
Original line number Diff line number Diff line
@@ -128,6 +128,7 @@ in 
        RestrictAddressFamilies = [

          "AF_INET"

          "AF_INET6"

          "AF_UNIX"

        ];

        RestrictNamespaces = true;

        RestrictRealtime = true;