amarth/customer-portal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

too lazy to think of a message, so enjoy this pointless text. Good luck future me...
All checks were successful
Test action / Print hello world (push) Successful in 8m8s
Details

Browse source
This commit is contained in:
Chris Kruining 2025-10-15 06:48:21 +00:00
parent 54e1a27cfe
commit 2a8417741d
2 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
nix/modules/customer-portal/flake-module.nix
View file

@ -109,12 +109,16 @@
Group = cfg.group;
UMask = "0077";
# MemoryAccounting = true;
# MemoryHigh = "50M";
# MemoryMax = "100M";
NoNewPrivileges = true;
PrivateDevices = true;
ProtectKernelTunables = true;
ProtectKernelModules = true;
ProtectControlGroups = true;
MemoryDenyWriteExecute = true;
# MemoryDenyWriteExecute = true;
LockPersonality = true;
RestrictAddressFamilies = [
"AF_UNIX"