security: harden some SP modules NixOS config evaluation permissions

2024-12-26 18:42:41 +04:00
parent 3a904f599e
commit f07b867af2
3 changed files with 17 additions and 17 deletions
--- a/sp-modules/simple-nixos-mailserver/config-paths-needed.json
+++ b/sp-modules/simple-nixos-mailserver/config-paths-needed.json
@@ -13,6 +13,8 @@
  [ "services", "opendkim" ],
  [ "services", "postfix", "group" ],
  [ "services", "postfix", "user" ],
-  [ "services", "redis" ],
+  [ "services", "redis", "servers", "rspamd", "bind" ],
+  [ "services", "redis", "servers", "rspamd", "port" ],
+  [ "services", "redis", "servers", "rspamd", "requirePass" ],
  [ "services", "rspamd" ]
 ]