diff options
| -rw-r--r-- | users/tazjin/nixos/koptevo/default.nix | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/users/tazjin/nixos/koptevo/default.nix b/users/tazjin/nixos/koptevo/default.nix index 8149070a8d..c1ac3571fd 100644 --- a/users/tazjin/nixos/koptevo/default.nix +++ b/users/tazjin/nixos/koptevo/default.nix @@ -146,6 +146,12 @@ in }; }; + # hack to work around the strict sandboxing of the gonic module + # breaking DNS resolutino + systemd.services.gonic.serviceConfig.BindReadOnlyPaths = [ + "-/etc/resolv.conf" + ]; + services.nginx.virtualHosts."music.tazj.in" = { addSSL = true; enableACME = true; |