diff --git a/kaas b/kaas new file mode 100755 index 0000000..27ceecc Binary files /dev/null and b/kaas differ diff --git a/nix/modules/customer-portal/flake-module.nix b/nix/modules/customer-portal/flake-module.nix index 4e5f9b8..dfeee4a 100755 --- a/nix/modules/customer-portal/flake-module.nix +++ b/nix/modules/customer-portal/flake-module.nix @@ -87,14 +87,6 @@ description = "Amarth cloud's customer portal"; serviceConfig = { - # ExecStart = utils.escapeSystemdExecArgs [ - # (lib.getExe pkgs.bun) - # "--bun" - # "run" - # "${cfg.package}/server/index.mjs" - # "--config" - # (format.generate "config.json" cfg.settings) - # ]; ExecStart = utils.escapeSystemdExecArgs [ (lib.getExe cfg.package) "--config" @@ -109,16 +101,11 @@ Group = cfg.group; UMask = "0077"; - # MemoryAccounting = true; - # MemoryHigh = "50M"; - # MemoryMax = "100M"; - NoNewPrivileges = true; PrivateDevices = true; ProtectKernelTunables = true; ProtectKernelModules = true; ProtectControlGroups = true; - # MemoryDenyWriteExecute = true; LockPersonality = true; RestrictAddressFamilies = [ "AF_UNIX"