diff --git a/nixos/modules/services/web-servers/nginx/default.nix b/nixos/modules/services/web-servers/nginx/default.nix index 922df1ea03abf..145c86028de80 100644 --- a/nixos/modules/services/web-servers/nginx/default.nix +++ b/nixos/modules/services/web-servers/nginx/default.nix @@ -1305,8 +1305,7 @@ in # System Call Filtering SystemCallArchitectures = "native"; SystemCallFilter = [ "~@cpu-emulation @debug @keyring @mount @obsolete @privileged @setuid" ] - ++ optional cfg.enableQuicBPF [ "bpf" ] - ++ optionals ((cfg.package != pkgs.tengine) && (cfg.package != pkgs.openresty) && (!lib.any (mod: (mod.disableIPC or false)) cfg.package.modules)) [ "~@ipc" ]; + ++ optional cfg.enableQuicBPF [ "bpf" ]; }; }; diff --git a/pkgs/servers/http/nginx/modules.nix b/pkgs/servers/http/nginx/modules.nix index 449e1cc660e48..1152a7eb8ac32 100644 --- a/pkgs/servers/http/nginx/modules.nix +++ b/pkgs/servers/http/nginx/modules.nix @@ -439,7 +439,6 @@ let self = { }; inputs = [ curl geoip libmodsecurity libxml2 lmdb yajl ]; - disableIPC = true; meta = with lib; { description = "Open source, cross platform web application firewall (WAF)";