diff options
author | Emily <vcs@emily.moe> | 2020-03-23 17:58:36 +0000 |
---|---|---|
committer | Emily <vcs@emily.moe> | 2020-04-18 05:15:47 +0100 |
commit | 695fd78ac45763b02ae4c68abda28974bb72c96b (patch) | |
tree | cfcc35adf4be1ababcc06e1506fd0407227ad701 /nixos/tests/acme.nix | |
parent | d0f04c1623ae74f256ff5ced77ac78c7fe3b6abc (diff) |
nixos/tests/acme: use CAP_NET_BIND_SERVICE
Diffstat (limited to 'nixos/tests/acme.nix')
-rw-r--r-- | nixos/tests/acme.nix | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/nixos/tests/acme.nix b/nixos/tests/acme.nix index 032432287bd09..693f02962f452 100644 --- a/nixos/tests/acme.nix +++ b/nixos/tests/acme.nix @@ -33,8 +33,7 @@ in import ./make-test-python.nix { serviceConfig = { ExecStart = "${pkgs.pebble}/bin/pebble-challtestsrv -dns01 ':53' -defaultIPv6 '' -defaultIPv4 '${nodes.webserver.config.networking.primaryIPAddress}'"; # Required to bind on privileged ports. - User = "root"; - Group = "root"; + AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ]; }; }; }; |