Unverified Commit 074df301 authored by dotlambda's avatar dotlambda Committed by GitHub
Browse files

nixos/imaginary: restart on OOMKill (#503481)

parents 07633b8b fba11df3

nixos/modules/services/networking/imaginary.nix

+1 −0
Original line number Diff line number Diff line
@@ -94,6 +94,7 @@ in 
                );

          in

          "${pkgs.imaginary}/bin/imaginary ${utils.escapeSystemdExecArgs args}";

        Restart = "on-failure";

        ProtectProc = "invisible";

        BindReadOnlyPaths = lib.optional (cfg.settings ? mount) cfg.settings.mount;

        CapabilityBoundingSet = if cfg.port < 1024 then [ "CAP_NET_BIND_SERVICE" ] else [ "" ];