Unverified Commit 6f44e121 authored by Arne Keller's avatar Arne Keller Committed by GitHub
Browse files

nixos/navidrome: support dns through systemd-resolved (#290901)

parents 314b7e17 66dce478

nixos/modules/services/audio/navidrome.nix

+14 −8
Original line number Diff line number Diff line
@@ -109,14 +109,20 @@ in 
            BindPaths =

              optional (cfg.settings ? DataFolder) cfg.settings.DataFolder

              ++ optional (cfg.settings ? CacheFolder) cfg.settings.CacheFolder;

            BindReadOnlyPaths = [

            BindReadOnlyPaths =

              [

                # navidrome uses online services to download additional album metadata / covers

                "${

                  config.environment.etc."ssl/certs/ca-certificates.crt".source

                }:/etc/ssl/certs/ca-certificates.crt"

                builtins.storeDir

                "/etc"

            ] ++ optional (cfg.settings ? MusicFolder) cfg.settings.MusicFolder;

              ]

              ++ optional (cfg.settings ? MusicFolder) cfg.settings.MusicFolder

              ++ lib.optionals config.services.resolved.enable [

                "/run/systemd/resolve/stub-resolv.conf"

                "/run/systemd/resolve/resolv.conf"

              ];

            CapabilityBoundingSet = "";

            RestrictAddressFamilies = [

              "AF_UNIX"