fix(nixos): bind mount ld-nix.so.preload if it exists

This means that a (dynamically) linked service will respect alternative
allocator backends if they are configured, for example.

1 files changed, 1 insertions, 1 deletions

diff --git a/nixos/flipdot-gschichtler.nix b/nixos/flipdot-gschichtler.nix
index e33426e..a19283b 100644
--- a/nixos/flipdot-gschichtler.nix
+++ b/nixos/flipdot-gschichtler.nix
@@ -90,7 +90,7 @@ in {
 
         # make sure only /nix/store is accessible
         TemporaryFileSystem = "/:ro";
-        BindReadOnlyPaths = "${builtins.storeDir}";
+        BindReadOnlyPaths = "${builtins.storeDir} -/etc/ld-nix.so.preload";
         # TemporaryFileSystem doesn't work with DynamicUser
         User = userGroupName;
         Group = userGroupName;