qbittorrent: Avoid using nscd

2023-10-04 17:01:35 +02:00 · 2023-10-04 17:01:35 +02:00 · 3a12a3f53a
parent 7fc8a4694c
commit 3a12a3f53a
1 changed files with 10 additions and 0 deletions
--- a/modules/qbittorrent/default.nix
+++ b/modules/qbittorrent/default.nix
@ -94,6 +94,16 @@ in
          # Increase number of open file descriptors (default: 1024)
          LimitNOFILE = 65536;

+          # Avoid using nscd (leaks dns)
+          InaccessiblePaths = [
+            "/run/nscd"
+          ];
+          # Make correct resolv.conf available for unit
+          BindReadOnlyPaths = [
+            "/etc/netns/qbittorrent/resolv.conf:/etc/resolv.conf"
+          ];
+
+
          # systemd-analyze --no-pager security qbittorrent.service
          CapabilityBoundingSet = null;
          PrivateDevices = true;