anselmolsm has quit [Remote host closed the connection]
anselmolsm has joined #nixos-security
anselmolsm has quit [Quit: Konversation terminated!]
kleisli has joined #nixos-security
rajivr has joined #nixos-security
andi- has quit [Ping timeout: 260 seconds]
FRidh has joined #nixos-security
kleisli has quit [Ping timeout: 265 seconds]
gueorgui has joined #nixos-security
<gueorgui>
Hi there, I'm building a derivation to build a go module, and I need to do something like `sudo setcap CAP\_NET\_BIND\_SERVICE=+eip /path/to/binary`. What would be the best way to do this?
<gueorgui>
Can I set security.wrappers on my derivation?
<gueorgui>
(The package is puma-dev, a development webserver for use with ruby/rack applications, and the goal is to let it serve applications on ports 80/443)
andi- has joined #nixos-security
<aanderse>
gueorgui: create a nixos module to do that
<gueorgui>
Sorry, I'm very new to nix/nixos, what does it mean to create a nixos module? Is it different from a derivation?
zarel has quit [Ping timeout: 256 seconds]
zarel has joined #nixos-security
<hexa->
gueorgui: a module exposes options that can be enabled by endusers that enable certain configurations, like you security.wrappers statement