diff --git a/modules/nixos/services/gallery-dl.nix b/modules/nixos/services/gallery-dl.nix index 15aa08d7..23e9ef94 100644 --- a/modules/nixos/services/gallery-dl.nix +++ b/modules/nixos/services/gallery-dl.nix @@ -150,6 +150,14 @@ in { } ''; startAt = value.startAt; + serviceConfig = { + NoNewPrivileges = true; + PrivateTmp = true; + ProtectControlGroup = true; + ProtectClock = true; + ProtectKernelModule = true; + ProtectKernelLogs = true; + }; }) cfg.jobs; }; }