From 21ed381d1824f47a522b468b57f93dcef5a1feb8 Mon Sep 17 00:00:00 2001
From: Dominik Polakovics <dominik.polakovics@cloonar.com>
Date: Sat, 29 Nov 2025 22:41:48 +0100
Subject: [PATCH] fix: pyload

---
 hosts/nas/modules/pyload.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/hosts/nas/modules/pyload.nix b/hosts/nas/modules/pyload.nix
index ecb44b0..dd1e65c 100644
--- a/hosts/nas/modules/pyload.nix
+++ b/hosts/nas/modules/pyload.nix
@@ -83,6 +83,14 @@ in
     };
 
     serviceConfig = {
+      # Bind-mount DNS configuration files into the sandboxed service
+      BindReadOnlyPaths = [
+        "/etc/resolv.conf"
+        "/etc/nsswitch.conf"
+        "/etc/hosts"
+        "/etc/ssl"
+        "/etc/static/ssl"
+      ];
       # Bind mount multimedia directory as writable for FileBot hook scripts
       BindPaths = [ "/var/lib/multimedia" ];