fix: add CAP_NET_BIND_SERVICE to flake (#49)

Add CAP_NET_BIND_SERVICE capability so leng can bind to port 53 while the service is running as a dynamic user
cottand · Dec 30, 2023 · 0f54972 · 0f54972
1 parent e77af99
commit 0f54972
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/flake.nix b/flake.nix
@@ -112,6 +112,7 @@
                 RestartSec = 2;
                 TasksMax = "infinity";
                 StateDirectory = "leng-sources";
+                AmbientCapabilities = "CAP_NET_BIND_SERVICE";
               };
 
               unitConfig = {