From 6cf34e7a2f76502e0261f3c303518a1a261dfccb Mon Sep 17 00:00:00 2001
From: Rory& <root@rory.gay>
Date: Fri, 27 Feb 2026 08:54:49 +0100
Subject: [PATCH] nix: add AF_NETLINK

---
 nix/modules/default/makeServerTsService.nix | 1 +
 nix/testVm/configuration.nix                | 1 +
 2 files changed, 2 insertions(+)

diff --git a/nix/modules/default/makeServerTsService.nix b/nix/modules/default/makeServerTsService.nix
index 4f7a13351..ae54e3f75 100644
--- a/nix/modules/default/makeServerTsService.nix
+++ b/nix/modules/default/makeServerTsService.nix
@@ -34,6 +34,7 @@ lib.recursiveUpdate
         "AF_INET"
         "AF_INET6"
         "AF_UNIX"
+        "AF_NETLINK"
       ];
       RestrictNamespaces = true;
       RestrictRealtime = true;
diff --git a/nix/testVm/configuration.nix b/nix/testVm/configuration.nix
index 8d467b3fb..db31cbe7a 100644
--- a/nix/testVm/configuration.nix
+++ b/nix/testVm/configuration.nix
@@ -15,6 +15,7 @@ in
   services.nginx.virtualHosts."api.sb.localhost" = nginxTestSigning;
   services.nginx.virtualHosts."gw.sb.localhost" = nginxTestSigning;
   services.nginx.virtualHosts."cdn.sb.localhost" = nginxTestSigning;
+  services.nginx.virtualHosts."webrtc.sb.localhost" = nginxTestSigning;
   services.nginx.virtualHosts."admin.sb.localhost" = nginxTestSigning;
 
   services.spacebarchat-server =