Skip to content

Commit

Permalink
nixos/endlessh-go: fix DNS resolution
Browse files Browse the repository at this point in the history
As suggested by toast003[1].

[1]: https://github.com/shizunge/endlessh-go/discussions/127#discussioncomment-11760912

(cherry picked from commit 99778e1)
  • Loading branch information
azahi authored and github-actions[bot] committed Jan 12, 2025
1 parent cb64f65 commit 14d5e92
Showing 1 changed file with 7 additions and 1 deletion.
8 changes: 7 additions & 1 deletion nixos/modules/services/security/endlessh-go.nix
Original file line number Diff line number Diff line change
Expand Up @@ -113,7 +113,13 @@ in
);
DynamicUser = true;
RootDirectory = rootDirectory;
BindReadOnlyPaths = [ builtins.storeDir ];
BindReadOnlyPaths = [
builtins.storeDir
"-/etc/hosts"
"-/etc/localtime"
"-/etc/nsswitch.conf"
"-/etc/resolv.conf"
];
InaccessiblePaths = [ "-+${rootDirectory}" ];
RuntimeDirectory = baseNameOf rootDirectory;
RuntimeDirectoryMode = "700";
Expand Down

0 comments on commit 14d5e92

Please sign in to comment.