about summary refs log tree commit diff
path: root/nixos/modules/services
diff options
context:
space:
mode:
authorMathijs Kwik <mathijs@bluescreen303.nl>2018-06-05 11:27:03 +0200
committerMathijs Kwik <mathijs@bluescreen303.nl>2018-06-06 22:26:26 +0200
commitc4fd2b7318c7e3cdaa2467ef0a9dfc2f6c34c6fa (patch)
tree12ac6ba7af14028d503e70f8e3c5efcc4d3ccd08 /nixos/modules/services
parent5f1ad293407ee82998a62ce93130f93ba9249f89 (diff)
downloadnixlib-c4fd2b7318c7e3cdaa2467ef0a9dfc2f6c34c6fa.tar
nixlib-c4fd2b7318c7e3cdaa2467ef0a9dfc2f6c34c6fa.tar.gz
nixlib-c4fd2b7318c7e3cdaa2467ef0a9dfc2f6c34c6fa.tar.bz2
nixlib-c4fd2b7318c7e3cdaa2467ef0a9dfc2f6c34c6fa.tar.lz
nixlib-c4fd2b7318c7e3cdaa2467ef0a9dfc2f6c34c6fa.tar.xz
nixlib-c4fd2b7318c7e3cdaa2467ef0a9dfc2f6c34c6fa.tar.zst
nixlib-c4fd2b7318c7e3cdaa2467ef0a9dfc2f6c34c6fa.zip
nixos/docker-registry: allow running on ports < 1024
Diffstat (limited to 'nixos/modules/services')
-rw-r--r--nixos/modules/services/misc/docker-registry.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/nixos/modules/services/misc/docker-registry.nix b/nixos/modules/services/misc/docker-registry.nix
index fe0a8e58de3d..f628da4ac4c0 100644
--- a/nixos/modules/services/misc/docker-registry.nix
+++ b/nixos/modules/services/misc/docker-registry.nix
@@ -120,6 +120,7 @@ in {
       serviceConfig = {
         User = "docker-registry";
         WorkingDirectory = cfg.storagePath;
+        AmbientCapabilities = mkIf (cfg.port < 1024) "cap_net_bind_service";
       };
     };