From 7084d3db4ce9dd0a8bda7d2073bd6cfed369e81d Mon Sep 17 00:00:00 2001
From: jeirmeister <jeir@jeirslab.xyz>
Date: Fri, 12 Sep 2025 13:04:00 -0700
Subject: [PATCH] Relax seccom for .NET services to avoid SIGSYS in LXC

---
 flake.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/flake.nix b/flake.nix
index dba6aeb..1ff7501 100644
--- a/flake.nix
+++ b/flake.nix
@@ -112,6 +112,14 @@
             "sys-kernel-debug.mount"
             "sys-fs-fuse-connections.mount"
           ];
+          # Relax seccomp for .NET services to avoid SIGSYS in LXC
+          systemd.services.btcpayserver.serviceConfig = {
+            SystemCallFilter = [];
+          };
+
+          systemd.services.nbxplorer.serviceConfig = {
+            SystemCallFilter = [];
+          };
 
           # State version
           system.stateVersion = "25.05";