diff options
author | Peter Hoeg <peter@hoeg.com> | 2019-09-23 11:27:32 +0800 |
---|---|---|
committer | GitHub <noreply@github.com> | 2019-09-23 11:27:32 +0800 |
commit | 55509279a904c56fca8353380d6ee9e21f64eefa (patch) | |
tree | 110162b2f4ae563e79c4140b633722dae08479dd /nixos | |
parent | fd3b329068af2d2c294fe503e5b7b1c4ecfbb74a (diff) | |
parent | 6c038cd4094fa6f581234b51ee5515a1484c1d49 (diff) |
Merge pull request #69260 from volth/patch-369
nixos/mailcatcher: add bind capabilities
Diffstat (limited to 'nixos')
-rw-r--r-- | nixos/modules/services/mail/mailcatcher.nix | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/nixos/modules/services/mail/mailcatcher.nix b/nixos/modules/services/mail/mailcatcher.nix index fa8d41e918d..f5b4508b335 100644 --- a/nixos/modules/services/mail/mailcatcher.nix +++ b/nixos/modules/services/mail/mailcatcher.nix @@ -3,7 +3,7 @@ let cfg = config.services.mailcatcher; - inherit (lib) mkEnableOption mkIf mkOption types; + inherit (lib) mkEnableOption mkIf mkOption types optionalString; in { # interface @@ -54,6 +54,7 @@ in DynamicUser = true; Restart = "always"; ExecStart = "${pkgs.mailcatcher}/bin/mailcatcher --foreground --no-quit --http-ip ${cfg.http.ip} --http-port ${toString cfg.http.port} --smtp-ip ${cfg.smtp.ip} --smtp-port ${toString cfg.smtp.port}"; + AmbientCapabilities = optionalString (cfg.http.port < 1024 || cfg.smtp.port < 1024) "cap_net_bind_service"; }; }; }; |