Loading nixos/modules/services/audio/music-assistant.nix +11 −1 Original line number Diff line number Diff line Loading @@ -26,6 +26,9 @@ let finalPackage = cfg.package.override { inherit (cfg) providers; }; # YouTube Music needs deno with JIT to solve yt-dlp challenges useYTMusic = lib.elem "ytmusic" cfg.providers; in { Loading Loading @@ -89,6 +92,10 @@ in ] ++ lib.optionals (lib.elem "snapcast" cfg.providers) [ snapcast ] ++ lib.optionals useYTMusic [ deno ffmpeg ]; serviceConfig = { Loading @@ -104,7 +111,7 @@ in CapabilityBoundingSet = [ "" ]; DevicePolicy = "closed"; LockPersonality = true; MemoryDenyWriteExecute = true; MemoryDenyWriteExecute = !useYTMusic; ProcSubset = "pid"; ProtectClock = true; ProtectControlGroups = true; Loading @@ -125,6 +132,9 @@ in SystemCallFilter = [ "@system-service" "~@privileged @resources" ] ++ lib.optionals useYTMusic [ "@pkey" ]; RestrictSUIDSGID = true; UMask = "0077"; Loading Loading
nixos/modules/services/audio/music-assistant.nix +11 −1 Original line number Diff line number Diff line Loading @@ -26,6 +26,9 @@ let finalPackage = cfg.package.override { inherit (cfg) providers; }; # YouTube Music needs deno with JIT to solve yt-dlp challenges useYTMusic = lib.elem "ytmusic" cfg.providers; in { Loading Loading @@ -89,6 +92,10 @@ in ] ++ lib.optionals (lib.elem "snapcast" cfg.providers) [ snapcast ] ++ lib.optionals useYTMusic [ deno ffmpeg ]; serviceConfig = { Loading @@ -104,7 +111,7 @@ in CapabilityBoundingSet = [ "" ]; DevicePolicy = "closed"; LockPersonality = true; MemoryDenyWriteExecute = true; MemoryDenyWriteExecute = !useYTMusic; ProcSubset = "pid"; ProtectClock = true; ProtectControlGroups = true; Loading @@ -125,6 +132,9 @@ in SystemCallFilter = [ "@system-service" "~@privileged @resources" ] ++ lib.optionals useYTMusic [ "@pkey" ]; RestrictSUIDSGID = true; UMask = "0077"; Loading