...

1 files changed, 3 insertions, 0 deletions

diff --git a/hosts/surtr/http.nix b/hosts/surtr/http.nix
index 5e63a311..11441e2c 100644
--- a/hosts/surtr/http.nix
+++ b/hosts/surtr/http.nix
@@ -60,6 +60,9 @@
         ];
         RuntimeDirectory = lib.mkForce [ "nginx" "nginx-client-bodies" ];
         RuntimeDirectoryMode = "0750";
+
+        SystemCallFilter = lib.mkForce "";
+        ReadWritePaths = [ "/srv/files" ];
       };
     };
   };