nixos/endlessh-go: fix DNS resolution

As suggested by toast003[1]. [1]: shizunge/endlessh-go#127 (comment)
NixOS · Jan 8, 2025 · 99778e1 · 99778e1
1 parent e09d079
commit 99778e1
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/nixos/modules/services/security/endlessh-go.nix b/nixos/modules/services/security/endlessh-go.nix
@@ -110,7 +110,13 @@ in
             );
           DynamicUser = true;
           RootDirectory = rootDirectory;
-          BindReadOnlyPaths = [ builtins.storeDir ];
+          BindReadOnlyPaths = [
+            builtins.storeDir
+            "-/etc/hosts"
+            "-/etc/localtime"
+            "-/etc/nsswitch.conf"
+            "-/etc/resolv.conf"
+          ];
           InaccessiblePaths = [ "-+${rootDirectory}" ];
           RuntimeDirectory = baseNameOf rootDirectory;
           RuntimeDirectoryMode = "700";