Commit a799bd0e authored by Felix Singer's avatar Felix Singer
Browse files

nixos/redmine: Set ProtectProc to `invisible` 

For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectProc=



Signed-off-by: default avatarFelix Singer <felixsinger@posteo.net>
parent fdf1ba03

nixos/modules/services/misc/redmine.nix

+1 −1
Original line number Diff line number Diff line
@@ -473,7 +473,7 @@ in 
        ProtectKernelLogs = true;

        ProtectKernelModules = true;

        ProtectKernelTunables = true;

        ProtectProc = "noaccess";

        ProtectProc = "invisible";

        ProtectSystem = "strict";

        ReadWritePaths = [

          cfg.stateDir