diff options
| author | Franz Pletz <fpletz@fnordicwalking.de> | 2022-12-19 12:04:22 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-12-19 12:04:22 +0100 |
| commit | 6f8f1b045427f59bd10273e27f9e08941e1b9ad5 (patch) | |
| tree | 41beb0ca06c10bf48850d6b5a79de076c0095ab4 /nixos/modules/services/monitoring | |
| parent | a4b24da293ea1b45b6dc66ef323f9dc878423c2e (diff) | |
| parent | a0b60725473c3f0646f5b6f9b1352a8d848c8b9e (diff) | |
Merge pull request #205865 from DeeUnderscore/fix/grafana-socket
Diffstat (limited to 'nixos/modules/services/monitoring')
| -rw-r--r-- | nixos/modules/services/monitoring/grafana.nix | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/nixos/modules/services/monitoring/grafana.nix b/nixos/modules/services/monitoring/grafana.nix index 9b3068796d8e3..5061666f57cec 100644 --- a/nixos/modules/services/monitoring/grafana.nix +++ b/nixos/modules/services/monitoring/grafana.nix @@ -1291,7 +1291,10 @@ in { SystemCallArchitectures = "native"; # Upstream grafana is not setting SystemCallFilter for compatibility # reasons, see https://github.com/grafana/grafana/pull/40176 - SystemCallFilter = [ "@system-service" "~@privileged" ]; + SystemCallFilter = [ + "@system-service" + "~@privileged" + ] ++ lib.optional (cfg.settings.server.protocol == "socket") [ "@chown" ]; UMask = "0027"; }; preStart = '' |