about summary refs log tree commit diff
path: root/nixos/modules/services/audio
diff options
context:
space:
mode:
authorVincent Ambo <mail@tazj.in>2023-10-02 01:05:00 +0300
committerVincent Ambo <mail@tazj.in>2023-10-02 01:05:00 +0300
commit259d112c054bc91de15427b7611abe3b77f27171 (patch)
tree6385f4b9f630587fbcae910aca34fea1dbef3dda /nixos/modules/services/audio
parent8345d28ec720f117791293e2a15c86984290fa17 (diff)
downloadnixlib-259d112c054bc91de15427b7611abe3b77f27171.tar
nixlib-259d112c054bc91de15427b7611abe3b77f27171.tar.gz
nixlib-259d112c054bc91de15427b7611abe3b77f27171.tar.bz2
nixlib-259d112c054bc91de15427b7611abe3b77f27171.tar.lz
nixlib-259d112c054bc91de15427b7611abe3b77f27171.tar.xz
nixlib-259d112c054bc91de15427b7611abe3b77f27171.tar.zst
nixlib-259d112c054bc91de15427b7611abe3b77f27171.zip
nixos/gonic: allow gonic to perform non-local DNS resolution
Gonic accesses external services (e.g. Listenbrainz or last.FM) for
scrobbling, but it was previously not allowed to read
`/etc/resolv.conf`.

This had the effect that, unless a local resolver was configured on
the system, any connection attempt would fail due to DNS resolution
being unavailable.
Diffstat (limited to 'nixos/modules/services/audio')
-rw-r--r--nixos/modules/services/audio/gonic.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/nixos/modules/services/audio/gonic.nix b/nixos/modules/services/audio/gonic.nix
index 65cf10f2c4b4..66daeb60b503 100644
--- a/nixos/modules/services/audio/gonic.nix
+++ b/nixos/modules/services/audio/gonic.nix
@@ -57,6 +57,7 @@ in
         ReadWritePaths = "";
         BindReadOnlyPaths = [
           # gonic can access scrobbling services
+          "-/etc/resolv.conf"
           "-/etc/ssl/certs/ca-certificates.crt"
           builtins.storeDir
           cfg.settings.podcast-path