nixos/blocky: allow socket db connection (#492411)

2026-03-08 01:24:09 +01:00 · 2026-03-04 02:24:17 +00:00 · 2026-03-04 02:24:17 +00:00 · 71331ce7ac
commit 71331ce7ac
parent e33c2abd48 a142420c52
1 changed files with 13 additions and 4 deletions
--- a/nixos/modules/services/networking/blocky.nix
+++ b/nixos/modules/services/networking/blocky.nix
@ -64,10 +64,19 @@ in
        ProtectKernelTunables = true;
        ProtectSystem = "strict";
        Restart = "on-failure";
-        RestrictAddressFamilies = [
-          "AF_INET"
-          "AF_INET6"
-        ];
+        RestrictAddressFamilies =
+          let
+            logType = lib.attrByPath [ "settings" "queryLog" "type" ] "" cfg;
+          in
+          (lib.optional (lib.elem logType [
+            "mysql"
+            "postgresql"
+            "timescale"
+          ]) "AF_UNIX")
+          ++ [
+            "AF_INET"
+            "AF_INET6"
+          ];
        RestrictNamespaces = true;
        RestrictRealtime = true;
        RuntimeDirectory = "blocky";