all repos — nix-packages @ 3708f9a51a6d9077d9a24c8bd427ebadc9e3f860

My personal collection of packages for nix

goaccess: restrict networking to common address families

Alin
commit

3708f9a51a6d9077d9a24c8bd427ebadc9e3f860

parent

11510946f71cc8f01a3a617731e26da407d79a05

1 file changed, 5 insertions(+), 0 deletions(-)

changed files
M modules/nixos/goaccess.nix → modules/nixos/goaccess.nix
@@ -274,6 +274,11 @@ # Security settings
               NoNewPrivileges = true;
               PrivateTmp = true;
               ProtectSystem = "strict";
+              RestrictAddressFamilies = lib.optionals (instanceCfg.settings.real-time-html) [
+                "AF_INET"
+                "AF_INET6"
+                "AF_UNIX"
+              ];
               ProtectHome = true;
               ReadOnlyPaths = (lib.flatten instanceCfg.settings.log-file);
               ReadWritePaths = [