Unverified Commit 1de301ae authored by Nick Cao's avatar Nick Cao Committed by GitHub
Browse files

Merge pull request #231954 from mac-chaffee/acme-ipv6 

nixos/security/acme: Fix listenHTTP bug with IPv6 addresses
parents cc0522d3 33b15fdc

nixos/modules/security/acme/default.nix

+1 −1
Original line number Diff line number Diff line
@@ -323,7 +323,7 @@ let 
            }

          fi

        '');

      } // optionalAttrs (data.listenHTTP != null && toInt (elemAt (splitString ":" data.listenHTTP) 1) < 1024) {

      } // optionalAttrs (data.listenHTTP != null && toInt (last (splitString ":" data.listenHTTP)) < 1024) {

        CapabilityBoundingSet = [ "CAP_NET_BIND_SERVICE" ];

        AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ];

      };