diff --git a/nix/modules/default/default.nix b/nix/modules/default/default.nix index 40c03def..0402609e 100644 --- a/nix/modules/default/default.nix +++ b/nix/modules/default/default.nix @@ -97,7 +97,7 @@ in ProtectKernelTunables = true; Restart = "on-failure"; RestartSec = 10; - RestrictAddressFamilies = [ "AF_INET" "AF_INET6" ]; + RestrictAddressFamilies = [ "AF_INET" "AF_INET6" "AF_UNIX" ]; RestrictNamespaces = true; RestrictRealtime = true; StartLimitBurst = 5;