[Backport release-24.11] nixos/endlessh-go: fix DNS resolution (#373170)

NixOS · Jan 12, 2025 · 635e887 · 635e887
2 parents 281bd5a + 14d5e92
commit 635e887
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/nixos/modules/services/security/endlessh-go.nix b/nixos/modules/services/security/endlessh-go.nix
@@ -113,7 +113,13 @@ in
             );
           DynamicUser = true;
           RootDirectory = rootDirectory;
-          BindReadOnlyPaths = [ builtins.storeDir ];
+          BindReadOnlyPaths = [
+            builtins.storeDir
+            "-/etc/hosts"
+            "-/etc/localtime"
+            "-/etc/nsswitch.conf"
+            "-/etc/resolv.conf"
+          ];
           InaccessiblePaths = [ "-+${rootDirectory}" ];
           RuntimeDirectory = baseNameOf rootDirectory;
           RuntimeDirectoryMode = "700";