Commit 21f82706 authored by Felix Singer's avatar Felix Singer
Browse files

nixos/redmine: Enable PrivateUsers hardening in service config 

For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#PrivateUsers=



Signed-off-by: default avatarFelix Singer <felixsinger@posteo.net>
parent a799bd0e

nixos/modules/services/misc/redmine.nix

+1 −0
Original line number Diff line number Diff line
@@ -465,6 +465,7 @@ in 
        PrivateDevices = true;

        PrivateMounts = true;

        PrivateTmp = true;

        PrivateUsers = true;

        ProcSubset = "pid";

        ProtectClock = true;

        ProtectControlGroups = "strict";