Unverified Commit 25181b59 authored by rht's avatar rht
Browse files

thinkfan: Disable network access

parent d49a222c

nixos/modules/services/hardware/thinkfan.nix

+7 −2
Original line number Diff line number Diff line
@@ -217,8 +217,13 @@ in { 


    systemd.services = {

      thinkfan.environment.THINKFAN_ARGS = escapeShellArgs ([ "-c" configFile ] ++ cfg.extraArgs);

      thinkfan.serviceConfig.Restart = "on-failure";

      thinkfan.serviceConfig.RestartSec = "30s";

      thinkfan.serviceConfig = {

        Restart = "on-failure";

        RestartSec = "30s";



        # Hardening

        PrivateNetwork = true;

      };



      # must be added manually, see issue #81138

      thinkfan.wantedBy = [ "multi-user.target" ];