Allow AnyProtocol for bitcoin if zmq options are set (and not if lnd is enabled)

This commit is contained in:
Jonas Nick 2019-11-07 22:58:21 +00:00
parent cf39d88c63
commit 0c22af03b7
No known key found for this signature in database
GPG Key ID: 4861DBF262123605

View File

@ -253,9 +253,9 @@ in {
PermissionsStartOnly = "true";
} // nix-bitcoin-services.defaultHardening
// (if cfg.enforceTor
then nix-bitcoin-services.allowTor
else nix-bitcoin-services.allowAnyIP
) // optionalAttrs config.services.lnd.enable nix-bitcoin-services.allowAnyProtocol; # FOR ZMQ
then nix-bitcoin-services.allowTor
else nix-bitcoin-services.allowAnyIP)
// optionalAttrs (cfg.zmqpubrawblock != null || cfg.zmqpubrawtx != null) nix-bitcoin-services.allowAnyProtocol;
};
systemd.services.bitcoind-import-banlist = {
description = "Bitcoin daemon banlist importer";