summary refs log tree commit diff
path: root/nixos/modules/services/networking/coturn.nix
diff options
context:
space:
mode:
authorJames <james@schoolshape.com>2017-06-16 12:43:04 +0100
committerJames Smith <james@schoolshape.com>2017-06-20 09:17:24 +0100
commitc9fdf3f4db3f9fbcb3a2248c3db6152256d56272 (patch)
treedeac07f99d2be12dc672e4f2ef728e4e012a01ed /nixos/modules/services/networking/coturn.nix
parent03d1e8a14ec29388f6a50c2900c7d4f48c491214 (diff)
downloadnixpkgs-c9fdf3f4db3f9fbcb3a2248c3db6152256d56272.tar
nixpkgs-c9fdf3f4db3f9fbcb3a2248c3db6152256d56272.tar.gz
nixpkgs-c9fdf3f4db3f9fbcb3a2248c3db6152256d56272.tar.bz2
nixpkgs-c9fdf3f4db3f9fbcb3a2248c3db6152256d56272.tar.lz
nixpkgs-c9fdf3f4db3f9fbcb3a2248c3db6152256d56272.tar.xz
nixpkgs-c9fdf3f4db3f9fbcb3a2248c3db6152256d56272.tar.zst
nixpkgs-c9fdf3f4db3f9fbcb3a2248c3db6152256d56272.zip
coturn: allow use of ports < 1024
Diffstat (limited to 'nixos/modules/services/networking/coturn.nix')
-rw-r--r--nixos/modules/services/networking/coturn.nix8
1 files changed, 8 insertions, 0 deletions
diff --git a/nixos/modules/services/networking/coturn.nix b/nixos/modules/services/networking/coturn.nix
index 14e6932d868..65273a4bf93 100644
--- a/nixos/modules/services/networking/coturn.nix
+++ b/nixos/modules/services/networking/coturn.nix
@@ -320,6 +320,14 @@ in {
         RuntimeDirectory = "turnserver";
         User = "turnserver";
         Group = "turnserver";
+        AmbientCapabilities =
+          mkIf (
+            cfg.listening-port < 1024 ||
+            cfg.alt-listening-port < 1024 ||
+            cfg.tls-listening-port < 1024 ||
+            cfg.alt-tls-listening-port < 1024 ||
+            cfg.min-port < 1024
+          ) "cap_net_bind_service";
         Restart = "on-abort";
       };
     };