Commit 5c43592f authored by Pascal Bach's avatar Pascal Bach
Browse files

nixos/meilisearch: allow access to proc for memory limit

Meilisearch requires access to more infomration in /proc to caluclate it's memory limits

Resolves #441978
parent 6d7ec06d
Loading
Loading
Loading
Loading
+3 −1
Original line number Diff line number Diff line
@@ -256,7 +256,9 @@ in
        LockPersonality = true;
        MemoryDenyWriteExecute = true;

        ProcSubset = "pid";
        # Meilisearch needs to determine cgroup memory limits to set its own memory limits.
        # This means this can't be set to "pid"
        ProcSubset = "all";
        ProtectProc = "invisible";

        NoNewPrivileges = true;