Skynet/misc_nixos-mailserver
7
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

Allow AF_UNIX sockets for dmarc reporter and allow group access

Browse source 
This is required to use redis over UNIX domain sockets.
This commit is contained in:
Martin Weinelt 2025-08-07 23:41:43 +02:00
parent eb656cd361
commit aa06b2f489
No known key found for this signature in database
GPG key ID: 87C1E9888F856759
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
mail-server/rspamd.nix
View file

@ -235,10 +235,14 @@ in
RestrictAddressFamilies = [ RestrictAddressFamilies = [
"AF_INET" "AF_INET"
"AF_INET6" "AF_INET6"
"AF_UNIX"
]; ];
RestrictNamespaces = true; RestrictNamespaces = true;
RestrictRealtime = true; RestrictRealtime = true;
RestrictSUIDSGID = true; RestrictSUIDSGID = true;
SupplementaryGroups = lib.optionals cfg.redis.configureLocally [
config.services.redis.servers.rspamd.group
];
SystemCallArchitectures = "native"; SystemCallArchitectures = "native";
SystemCallFilter = [ SystemCallFilter = [
"@system-service" "@system-service"