Unverified Commit 1fe305df authored by Nick Cao's avatar Nick Cao Committed by GitHub
Browse files

Merge pull request #256906 from oddlama/fix-typesense-0.25.1 

nixos/typesense: disable MemoryDenyWriteExecute which is needed since 0.25.1
parents 4199b601 11d4f6e4

nixos/modules/services/search/typesense.nix

+2 −2
Original line number Diff line number Diff line
@@ -83,12 +83,12 @@ in { 
        Group = "typesense";



        StateDirectory = "typesense";

        StateDirectoryMode = "0700";

        StateDirectoryMode = "0750";



        # Hardening

        CapabilityBoundingSet = "";

        LockPersonality = true;

        MemoryDenyWriteExecute = true;

        # MemoryDenyWriteExecute = true; needed since 0.25.1

        NoNewPrivileges = true;

        PrivateUsers = true;

        PrivateTmp = true;