modules/ipfs: allow CAP_NET_BIND_SERVICE
This commit is contained in:
parent
1fdc2aed10
commit
efc518a97b
1 changed files with 4 additions and 1 deletions
|
@ -87,7 +87,10 @@ in
|
||||||
|
|
||||||
systemd.services.ipfs = {
|
systemd.services.ipfs = {
|
||||||
environment.LIBP2P_FORCE_PNET = "1";
|
environment.LIBP2P_FORCE_PNET = "1";
|
||||||
serviceConfig.Slice = "remotefshost.slice";
|
serviceConfig = {
|
||||||
|
Slice = "remotefshost.slice";
|
||||||
|
AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ];
|
||||||
|
};
|
||||||
postStart = "chmod 660 /run/ipfs/ipfs-api.sock";
|
postStart = "chmod 660 /run/ipfs/ipfs-api.sock";
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue