too lazy to think of a message, so enjoy this pointless text. Good luck future me...
Some checks failed
Test action / Print hello world (push) Has been cancelled
Some checks failed
Test action / Print hello world (push) Has been cancelled
This commit is contained in:
parent
f51b8532a1
commit
6416143aa3
2 changed files with 0 additions and 13 deletions
BIN
kaas
Executable file
BIN
kaas
Executable file
Binary file not shown.
|
|
@ -87,14 +87,6 @@
|
|||
description = "Amarth cloud's customer portal";
|
||||
|
||||
serviceConfig = {
|
||||
# ExecStart = utils.escapeSystemdExecArgs [
|
||||
# (lib.getExe pkgs.bun)
|
||||
# "--bun"
|
||||
# "run"
|
||||
# "${cfg.package}/server/index.mjs"
|
||||
# "--config"
|
||||
# (format.generate "config.json" cfg.settings)
|
||||
# ];
|
||||
ExecStart = utils.escapeSystemdExecArgs [
|
||||
(lib.getExe cfg.package)
|
||||
"--config"
|
||||
|
|
@ -109,16 +101,11 @@
|
|||
Group = cfg.group;
|
||||
UMask = "0077";
|
||||
|
||||
# MemoryAccounting = true;
|
||||
# MemoryHigh = "50M";
|
||||
# MemoryMax = "100M";
|
||||
|
||||
NoNewPrivileges = true;
|
||||
PrivateDevices = true;
|
||||
ProtectKernelTunables = true;
|
||||
ProtectKernelModules = true;
|
||||
ProtectControlGroups = true;
|
||||
# MemoryDenyWriteExecute = true;
|
||||
LockPersonality = true;
|
||||
RestrictAddressFamilies = [
|
||||
"AF_UNIX"
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue