nixos/docker-registry: allow running on ports < 1024

2018-06-05 11:27:03 +02:00
parent 5f1ad29340
commit c4fd2b7318
1 changed files with 1 additions and 0 deletions
--- a/nixos/modules/services/misc/docker-registry.nix
+++ b/nixos/modules/services/misc/docker-registry.nix
@@ -120,6 +120,7 @@ in {
      serviceConfig = {
        User = "docker-registry";
        WorkingDirectory = cfg.storagePath;
+        AmbientCapabilities = mkIf (cfg.port < 1024) "cap_net_bind_service";
      };
    };