From 20adbe260fae9869d4ad0c4a530a5279def0c24b Mon Sep 17 00:00:00 2001
From: Mikhail Klementev <blame@dumpstack.io>
Date: Wed, 4 Dec 2019 17:33:37 +0000
Subject: [PATCH] Temporary fix for
 https://github.com/NixOS/nixpkgs/issues/74849

---
 configuration.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/configuration.nix b/configuration.nix
index cb10954..6da6ed0 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -2,7 +2,7 @@
 # nix-channel --add https://nixos.org/channels/nixos-unstable unstable
 # nix-channel --update
 #
-{ config, pkgs, ... }:
+{ config, pkgs, lib, ... }:
 let
   unstable = import <unstable> {};
   secrets = import ./secrets.nix;
@@ -50,6 +50,9 @@ in {
     '';
   };
 
+  systemd.services.gitea.serviceConfig.SystemCallFilter =
+    lib.mkForce "~@clock @cpu-emulation @debug @keyring @memlock @module @mount @obsolete @raw-io @reboot @resources @setuid @swap";
+
   services.nginx = {
     enable = true;
     virtualHosts."${hostname}" = {