Commit e1996d7b authored by Alyssa Ross's avatar Alyssa Ross
Browse files

nixos/public-inbox: bind key and cert paths

Otherwise, these can't be accessed by the service.
parent eb00bbcd
Loading
Loading
Loading
Loading
+4 −0
Original line number Diff line number Diff line
@@ -81,6 +81,10 @@ let
            "${config.i18n.glibcLocales}"
          ]
          ++ mapAttrsToList (name: inbox: inbox.description) cfg.inboxes
          ++ filter (x: x != null) [
            cfg.${proto}.cert or null
            cfg.${proto}.key or null
          ]
          ++
            # Without confinement the whole Nix store
            # is made available to the service