Merge pull request 'Revert "matrix-appservice-irc: remove unneeded syscall override"' (#171) from fix/matrix-appservice-irc into main

Reviewed-on: #171 Reviewed-by: Akshay Mankar <axeman@noreply.git.pub.solar>
2024-04-27 13:50:46 +00:00 · 2024-04-27 13:50:46 +00:00 · 5e34acd765
parent 505d0f34ea 2fa3ccf28e
commit 5e34acd765
1 changed files with 5 additions and 0 deletions
--- a/hosts/nachtigall/apps/matrix/irc.nix
+++ b/hosts/nachtigall/apps/matrix/irc.nix
@ -13,6 +13,11 @@ let
  synapseClientPort = "${toString listenerWithClient.port}";
 in
 {
+  systemd.services.matrix-appservice-irc.serviceConfig.SystemCallFilter = lib.mkForce [
+    "@system-service @pkey"
+    "~@privileged @resources"
+    "@chown"
+  ];
  services.matrix-appservice-irc = {
    enable = true;
    localpart = "irc_bot";