Add workaround for nginx bug

1 files changed, 5 insertions, 1 deletions

diff --git a/static.nix b/static.nix
index 13f75fd..378198a 100644
--- a/static.nix
+++ b/static.nix
@@ -173,6 +173,10 @@ in {
     molly-brown.serviceConfig.SupplementaryGroups = [
       config.security.acme.certs.${domain}.group
     ];
-    nginx.serviceConfig.SupplementaryGroups = [ "shadow" ];
+    nginx.serviceConfig = {
+      SupplementaryGroups = [ "shadow" ];
+      # https://discourse.nixos.org/t/nginx-worker-processes-exit-with-signal-31-when-running-via-systemd/13471/6
+      SystemCallFilter = lib.mkForce "";
+    };
   };
 }