privatevoid.net/depot
1
1
Fork 0
Code Issues 23 Pull requests 2 Projects 3 Releases Packages Wiki Activity Actions

cluster/services/attic: enable @resources syscall group

Browse source
This commit is contained in:
Max Headroom 2024-11-10 04:15:28 +01:00
parent 15af41e3c4
commit 886ddd9a1a
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
cluster/services/attic/server.nix
View file

@ -65,6 +65,7 @@ in
serviceConfig = { serviceConfig = {
DynamicUser = lib.mkForce false; DynamicUser = lib.mkForce false;
RestrictAddressFamilies = [ "AF_INET" "AF_INET6" "AF_UNIX" "AF_NETLINK" ]; RestrictAddressFamilies = [ "AF_INET" "AF_INET6" "AF_UNIX" "AF_NETLINK" ];
SystemCallFilter = lib.mkAfter [ "@resources" ];
}; };
environment = { environment = {
AWS_SHARED_CREDENTIALS_FILE = "/run/locksmith/garage-attic"; AWS_SHARED_CREDENTIALS_FILE = "/run/locksmith/garage-attic";