modules/spectrum/irccat: fix SystemCallFilter

The set of syscalls it uses appears to have changed in an update.
@system-service is supposed to be "a reasonable set of system calls
used by common system services, excluding any special purpose calls.",
which sounds good enough.

1 files changed, 1 insertions, 1 deletions

diff --git a/modules/server/spectrum/spectrumbot/irccat/default.nix b/modules/server/spectrum/spectrumbot/irccat/default.nix
index 0f5352c761a4..f4efd3828703 100644
--- a/modules/server/spectrum/spectrumbot/irccat/default.nix
+++ b/modules/server/spectrum/spectrumbot/irccat/default.nix
@@ -47,7 +47,7 @@
     serviceConfig.RestrictNamespaces = true;
     serviceConfig.RestrictRealtime = true;
     serviceConfig.SystemCallArchitectures = "native";
-    serviceConfig.SystemCallFilter = "~@clock @cpu-emulation @debug @module @mount @obsolete @privileged @raw-io @reboot @resources @swap";
+    serviceConfig.SystemCallFilter = [ "@system-service" "~@privileged" ];
     serviceConfig.UMask = "0077";
   };
 }