From d6dfd183cb9926f76f08220036c23decea2e6d23 Mon Sep 17 00:00:00 2001
From: niten <niten@fudo.org>
Date: Sun, 24 Sep 2023 12:59:36 -0700
Subject: [PATCH] Whoops, put SYS_ADMIN on wrong container

---
 mail-server.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mail-server.nix b/mail-server.nix
index 1ab9564..aa4fdd9 100644
--- a/mail-server.nix
+++ b/mail-server.nix
@@ -323,6 +323,7 @@ in {
                 # Needs external access for blacklist checks
                 "external_network"
               ];
+              capabilities.SYS_ADMIN = true;
             };
             nixos = {
               useSystemd = true;
@@ -354,7 +355,6 @@ in {
               ];
               user = mkUserMap "mailserver-antivirus";
               volumes = [ "${cfg.state-directory}/antivirus:/state" ];
-              capabilities.SYS_ADMIN = true;
             };
             nixos = {
               useSystemd = true;