summary refs log tree commit diff
diff options
context:
space:
mode:
authorPhilipp Bartsch <phil@grmr.de>2020-07-18 12:25:07 +0200
committerPhilipp Bartsch <phil@grmr.de>2020-07-18 12:25:07 +0200
commit9cca2eb4c80eb5e41d67349fab8bffdd38d577fc (patch)
treeaf7419f0b31694bfae6b80f5bc69c750eeac64f2
parent7e9f3e9eb16ca1814199872f2d44ece88297e9cb (diff)
downloadnixpkgs-9cca2eb4c80eb5e41d67349fab8bffdd38d577fc.tar
nixpkgs-9cca2eb4c80eb5e41d67349fab8bffdd38d577fc.tar.gz
nixpkgs-9cca2eb4c80eb5e41d67349fab8bffdd38d577fc.tar.bz2
nixpkgs-9cca2eb4c80eb5e41d67349fab8bffdd38d577fc.tar.lz
nixpkgs-9cca2eb4c80eb5e41d67349fab8bffdd38d577fc.tar.xz
nixpkgs-9cca2eb4c80eb5e41d67349fab8bffdd38d577fc.tar.zst
nixpkgs-9cca2eb4c80eb5e41d67349fab8bffdd38d577fc.zip
nixos/rspamd: fixup cosmetics
-rw-r--r--nixos/modules/services/mail/rspamd.nix6
1 files changed, 3 insertions, 3 deletions
diff --git a/nixos/modules/services/mail/rspamd.nix b/nixos/modules/services/mail/rspamd.nix
index 2707bd16cdb..07ef5461d05 100644
--- a/nixos/modules/services/mail/rspamd.nix
+++ b/nixos/modules/services/mail/rspamd.nix
@@ -405,8 +405,8 @@ in
         StateDirectory = "rspamd";
         StateDirectoryMode = "0700";
 
-        AmbientCapabilities = "";
-        CapabilityBoundingSet = "";
+        AmbientCapabilities = [];
+        CapabilityBoundingSet = [];
         DevicePolicy = "closed";
         LockPersonality = true;
         NoNewPrivileges = true;
@@ -423,7 +423,7 @@ in
         ProtectKernelTunables = true;
         ProtectSystem = "strict";
         RemoveIPC = true;
-        RestrictAddressFamilies = "AF_INET AF_INET6 AF_UNIX";
+        RestrictAddressFamilies = [ "AF_INET" "AF_INET6" "AF_UNIX" ];
         RestrictNamespaces = true;
         RestrictRealtime = true;
         RestrictSUIDSGID = true;