dogeorg / dogeboxd

Dogebox system manager service
MIT License
1 stars 0 forks source link

Allow internal router to listen on :80 by default #37

Closed SomeoneWeird closed 2 months ago

SomeoneWeird commented 2 months ago

This requires another nix security wrapper configured in /etc/nixos/configuration.nix

It must contain:

security.wrappers.dogeboxd = {
  source = "/path/to/dogeboxd/build/dogeboxd";
  capabilities = "cap_net_bind_service=+ep";
  owner = "username";
  group = "users";
};

Where source and owner have been updated to the correct values. owner should be your current non-root user.

This requires an equivalent change over in https://github.com/dogeorg/dogebox too.