Commit ee9fdd67 authored by Florian Schubert's avatar Florian Schubert Committed by Fernando Rodrigues
Browse files

nixos/traefik: change LimitNPROC to TasksMax 

NPROC is per UID, which can cause problems in containerized setups; TasksMax
should be preferred as it is only for this service and not the UID.
parent 3191e450

nixos/modules/services/web-servers/traefik.nix

+1 −1
Original line number Diff line number Diff line
@@ -466,7 +466,7 @@ in 
        AmbientCapabilities = "cap_net_bind_service";

        CapabilityBoundingSet = "cap_net_bind_service";

        NoNewPrivileges = true;

        LimitNPROC = 64;

        TasksMax = 64;

        LimitNOFILE = 1048576;

        PrivateTmp = true;

        PrivateDevices = true;