rtl, clightning-rest: update to nodejs 18

16 is no longer supported by NixOS 23.05. 18 is the latest LTS version.
2023-07-08 15:32:58 +02:00
parent 03fb70efa4
commit bd77b89fea
4 changed files with 15 additions and 11 deletions
--- a/pkgs/lib.nix
+++ b/pkgs/lib.nix
@@ -41,8 +41,12 @@ let self = {
    RestrictAddressFamilies = self.defaultHardening.RestrictAddressFamilies + " AF_NETLINK";
  };

-  # nodejs applications require memory write execute for JIT compilation
-  nodejs = { MemoryDenyWriteExecute = false; };
+  nodejs = {
+    # Required for JIT compilation
+    MemoryDenyWriteExecute = false;
+    # Required by nodejs >= 18
+    SystemCallFilter = self.defaultHardening.SystemCallFilter ++ [ "@pkey" ];
+  };

  # Allow takes precedence over Deny.
  allowLocalIPAddresses = {