From e2dfbfe8296ca8cd6b1e3a51a7e9f4ab50097c22 Mon Sep 17 00:00:00 2001
From: Colin <colin@uninsane.org>
Date: Sun, 10 Nov 2024 05:07:13 +0000
Subject: [PATCH] kiwix-serve: fix service sandboxing typo (ReadPaths ->
 ReadOnlyPaths)

---
 modules/services/kiwix-serve.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/services/kiwix-serve.nix b/modules/services/kiwix-serve.nix
index 936002579..35a1e2d70 100644
--- a/modules/services/kiwix-serve.nix
+++ b/modules/services/kiwix-serve.nix
@@ -58,7 +58,7 @@ in
       serviceConfig.ProtectProc = "invisible";
       serviceConfig.ProtectSystem = "strict";
       serviceConfig.RemoveIPC = true;
-      serviceConfig.ReadPaths = cfg.zimPaths;
+      serviceConfig.ReadOnlyPaths = cfg.zimPaths;
       serviceConfig.RestrictAddressFamilies = "AF_UNIX AF_INET AF_INET6";
       serviceConfig.RestrictNamespaces = true;
       serviceConfig.RestrictSUIDSGID = true;