From db280ba7ac0d0d0917da160eecdaebf38fbbd38d Mon Sep 17 00:00:00 2001
From: Felix Stupp <felix.stupp@banananet.work>
Date: Tue, 16 Jun 2026 00:25:37 +0000
Subject: [PATCH] nixos/adguardhome: allow AF_UNIX when log.file=="syslog"

(cherry picked from commit 6ac56136e5ca34117b18f98cae244b934182a0c8)
---
 nixos/modules/services/networking/adguardhome.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/nixos/modules/services/networking/adguardhome.nix b/nixos/modules/services/networking/adguardhome.nix
index 5d6c4459aa8e..396046ad8140 100644
--- a/nixos/modules/services/networking/adguardhome.nix
+++ b/nixos/modules/services/networking/adguardhome.nix
@@ -238,6 +238,8 @@ in
           "AF_INET"
           "AF_INET6"
         ]
+        # AF_UNIX to be able to connect to e.g. /dev/log
+        ++ lib.optionals (cfg.settings.log.file or "" == "syslog") [ "AF_UNIX" ]
         ++ lib.optionals cfg.allowDHCP [ "AF_PACKET" ];
         RestrictNamespaces = true;
         RestrictRealtime = true;