Commit 5c43592f authored by Pascal Bach's avatar Pascal Bach
Browse files

nixos/meilisearch: allow access to proc for memory limit 

Meilisearch requires access to more infomration in /proc to caluclate it's memory limits

Resolves #441978
parent 6d7ec06d

nixos/modules/services/search/meilisearch.nix

+3 −1
Original line number Diff line number Diff line
@@ -256,7 +256,9 @@ in 
        LockPersonality = true;

        MemoryDenyWriteExecute = true;



        ProcSubset = "pid";

        # Meilisearch needs to determine cgroup memory limits to set its own memory limits.

        # This means this can't be set to "pid"

        ProcSubset = "all";

        ProtectProc = "invisible";



        NoNewPrivileges = true;