amarth/customer-portal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

too lazy to think of a message, so enjoy this pointless text. Good luck future me...
All checks were successful
Test action / Print hello world (push) Successful in 8m8s
Details

Browse source
This commit is contained in:
Chris Kruining 2025-10-15 06:48:21 +00:00
parent 54e1a27cfe
commit 2a8417741d
2 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
bunfig.toml
View file

@ -4,3 +4,6 @@ coverageSkipTestFiles = true
coverageReporter = ['text', 'lcov'] coverageReporter = ['text', 'lcov']
coverageDir = './.coverage' coverageDir = './.coverage'
preload = "./test.config.ts" preload = "./test.config.ts"
[install]
minimumReleaseAge = 604800 # 7 days in seconds

6
nix/modules/customer-portal/flake-module.nix
View file

@ -109,12 +109,16 @@
Group = cfg.group; Group = cfg.group;
UMask = "0077"; UMask = "0077";
# MemoryAccounting = true;
# MemoryHigh = "50M";
# MemoryMax = "100M";
NoNewPrivileges = true; NoNewPrivileges = true;
PrivateDevices = true; PrivateDevices = true;
ProtectKernelTunables = true; ProtectKernelTunables = true;
ProtectKernelModules = true; ProtectKernelModules = true;
ProtectControlGroups = true; ProtectControlGroups = true;
MemoryDenyWriteExecute = true; # MemoryDenyWriteExecute = true;
LockPersonality = true; LockPersonality = true;
RestrictAddressFamilies = [ RestrictAddressFamilies = [
"AF_UNIX" "AF_UNIX"