stuff

2025-08-12 13:51:43 -07:00
parent 9b6c0fc4a9
commit e7e21f652e
1 changed files with 2 additions and 0 deletions
--- a/prophecy/murmur.nix
+++ b/prophecy/murmur.nix
@@ -26,6 +26,8 @@ in
    before = [ "check-murmur-cert.service" ];
    serviceConfig = {
      ExecReload = "${pkgs.util-linux}/bin/kill -SIGUSR1 $MAINPID";
+      SocketBindAllow = [ "ipv4:${toString mcfg.port}" "ipv6:${toString mcfg.port}" ];
+      SocketBindDeny = "any";
    };
  };