From 5cf311c0363fc0ff4cd8c3e1f47332480c664918 Mon Sep 17 00:00:00 2001
From: Naïm Favier <n@monade.li>
Date: Wed, 15 Feb 2023 18:14:58 +0100
Subject: nixos/unbound: make stateDir writable

---
 nixos/modules/services/networking/unbound.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/nixos/modules/services/networking/unbound.nix b/nixos/modules/services/networking/unbound.nix
index c85dd03867f77..0426dbb0c83c3 100644
--- a/nixos/modules/services/networking/unbound.nix
+++ b/nixos/modules/services/networking/unbound.nix
@@ -286,6 +286,8 @@ in {
         LockPersonality = true;
         RestrictSUIDSGID = true;
 
+        ReadWritePaths = [ cfg.stateDir ];
+
         Restart = "on-failure";
         RestartSec = "5s";
       };
-- 
cgit 1.4.1