about summary refs log tree commit diff
diff options
context:
space:
mode:
authorNaïm Favier <n@monade.li>2023-02-23 14:23:53 +0100
committerGitHub <noreply@github.com>2023-02-23 14:23:53 +0100
commit129b6f78121802d18d215c9f9e04d7971c58ea0c (patch)
tree54158759c9f7bdbb91976095b89a5874aa9fd218
parentdd6b0589980e11dc923bd0e7e07c5dc2835dac39 (diff)
parent5cf311c0363fc0ff4cd8c3e1f47332480c664918 (diff)
Merge pull request #216504 from ncfavier/unbound-state-dir-writable
nixos/unbound: make stateDir writable
-rw-r--r--nixos/modules/services/networking/unbound.nix2
1 files changed, 2 insertions, 0 deletions
diff --git a/nixos/modules/services/networking/unbound.nix b/nixos/modules/services/networking/unbound.nix
index c85dd03867f77..0426dbb0c83c3 100644
--- a/nixos/modules/services/networking/unbound.nix
+++ b/nixos/modules/services/networking/unbound.nix
@@ -286,6 +286,8 @@ in {
         LockPersonality = true;
         RestrictSUIDSGID = true;
 
+        ReadWritePaths = [ cfg.stateDir ];
+
         Restart = "on-failure";
         RestartSec = "5s";
       };