Commit c268ff5f authored by Felix Singer's avatar Felix Singer
Browse files

nixos/pgadmin: Set ProtectControlGroups to `strict` in service config 

For documentation see
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectControlGroups=



Signed-off-by: default avatarFelix Singer <felixsinger@posteo.net>
parent f0f0fcee

nixos/modules/services/admin/pgadmin.nix

+1 −1
Original line number Diff line number Diff line
@@ -241,7 +241,7 @@ in 
        PrivateTmp = true;

        PrivateUsers = true;

        ProtectClock = true;

        ProtectControlGroups = true;

        ProtectControlGroups = "strict";

        ProtectHome = true;

        ProtectHostname = true;

        ProtectKernelLogs = true;