Commit 3d4b08cd authored by Felix Singer's avatar Felix Singer
Browse files

nixos/pgadmin: Set ProtectProc to `invisble` in service config 

For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectProc=



Signed-off-by: default avatarFelix Singer <felixsinger@posteo.net>
parent c268ff5f

nixos/modules/services/admin/pgadmin.nix

+1 −0
Original line number Diff line number Diff line
@@ -247,6 +247,7 @@ in 
        ProtectKernelLogs = true;

        ProtectKernelModules = true;

        ProtectKernelTunables = true;

        ProtectProc = "invisible";

        ProtectSystem = "full";

        RemoveIPC = true;

        RestrictAddressFamilies = [