Whoops, put SYS_ADMIN on wrong container

2023-09-24 12:59:36 -07:00
parent 82eb30e83d
commit d6dfd183cb
1 changed files with 1 additions and 1 deletions
--- a/mail-server.nix
+++ b/mail-server.nix
@@ -323,6 +323,7 @@ in {
                # Needs external access for blacklist checks
                "external_network"
              ];
+              capabilities.SYS_ADMIN = true;
            };
            nixos = {
              useSystemd = true;
@@ -354,7 +355,6 @@ in {
              ];
              user = mkUserMap "mailserver-antivirus";
              volumes = [ "${cfg.state-directory}/antivirus:/state" ];
-              capabilities.SYS_ADMIN = true;
            };
            nixos = {
              useSystemd = true;