Temporary fix for https://github.com/NixOS/nixpkgs/issues/74849

configuration.nix

@@ -2,7 +2,7 @@
 # nix-channel --add https://nixos.org/channels/nixos-unstable unstable
 # nix-channel --update
 #
-{ config, pkgs, ... }:
+{ config, pkgs, lib, ... }:
 let
   unstable = import <unstable> {};
   secrets = import ./secrets.nix;
@@ -50,6 +50,9 @@ in {
     '';
   };
 
+  systemd.services.gitea.serviceConfig.SystemCallFilter =
+    lib.mkForce "~@clock @cpu-emulation @debug @keyring @memlock @module @mount @obsolete @raw-io @reboot @resources @setuid @swap";
+
   services.nginx = {
     enable = true;
     virtualHosts."${hostname}" = {