modules/ipfs: allow CAP_NET_BIND_SERVICE
This commit is contained in:
parent
1fdc2aed10
commit
efc518a97b
1 changed files with 4 additions and 1 deletions
|
@ -87,7 +87,10 @@ in
|
|||
|
||||
systemd.services.ipfs = {
|
||||
environment.LIBP2P_FORCE_PNET = "1";
|
||||
serviceConfig.Slice = "remotefshost.slice";
|
||||
serviceConfig = {
|
||||
Slice = "remotefshost.slice";
|
||||
AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ];
|
||||
};
|
||||
postStart = "chmod 660 /run/ipfs/ipfs-api.sock";
|
||||
};
|
||||
|
||||
|
|
Loading…
Reference in a new issue