From d41bac083b07996fc6773ca7530f6ecce8fad057 Mon Sep 17 00:00:00 2001
From: Ngô Ngọc Đức Huy <huyngo@disroot.org>
Date: Fri, 29 Mar 2024 15:24:15 +0700
Subject: Add workaround for nginx bug

---
 static.nix | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/static.nix b/static.nix
index 13f75fd..378198a 100644
--- a/static.nix
+++ b/static.nix
@@ -173,6 +173,10 @@ in {
     molly-brown.serviceConfig.SupplementaryGroups = [
       config.security.acme.certs.${domain}.group
     ];
-    nginx.serviceConfig.SupplementaryGroups = [ "shadow" ];
+    nginx.serviceConfig = {
+      SupplementaryGroups = [ "shadow" ];
+      # https://discourse.nixos.org/t/nginx-worker-processes-exit-with-signal-31-when-running-via-systemd/13471/6
+      SystemCallFilter = lib.mkForce "";
+    };
   };
 }
-- 
cgit 1.4.1