Drift/pvv-nixos-config
Drift
/
pvv-nixos-config
16
4
Fork 1
Code Issues Pull Requests 6 Wiki Activity

Disable network because tar file is pushed from Microbel separately

This commit is contained in:
Alf Helge Jakobsen 2024-11-09 21:58:38 +01:00
parent 906f2d5594
commit de90a8e827
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
hosts/bekkalokk/services/website/fetch-gallery.nix
View File

@ -70,7 +70,7 @@ in {
MemoryDenyWriteExecute = true; MemoryDenyWriteExecute = true;
NoNewPrivileges = true; # disable for third party rotate scripts NoNewPrivileges = true; # disable for third party rotate scripts
PrivateDevices = true; PrivateDevices = true;
#PrivateNetwork = true; # disable for mail delivery PrivateNetwork = true; # disable for mail delivery
PrivateTmp = true; PrivateTmp = true;
ProtectClock = true; ProtectClock = true;
ProtectControlGroups = true; ProtectControlGroups = true;
@ -84,7 +84,7 @@ in {
RestrictNamespaces = true; RestrictNamespaces = true;
RestrictRealtime = true; RestrictRealtime = true;
RestrictSUIDSGID = true; # disable for creating setgid directories RestrictSUIDSGID = true; # disable for creating setgid directories
#SocketBindDeny = [ "any" ]; SocketBindDeny = [ "any" ];
SystemCallArchitectures = "native"; SystemCallArchitectures = "native";
SystemCallFilter = [ SystemCallFilter = [
"@system-service" "@system-service"