foodogsquared/nixos-config
1
0
Fork 0
mirror of https://github.com/foo-dogsquared/nixos-config.git synced 2025-01-30 22:57:55 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

hosts/plover: fix Vaultwarden hardened service

Browse Source
This commit is contained in:
Gabriel Arazas 2023-07-20 10:42:43 +08:00
parent b1072a437b
commit a2ab1f09a8
No known key found for this signature in database
GPG Key ID: ADE0C41DAB221FCC
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
hosts/plover/modules/services/vaultwarden.nix
View File

@ -108,7 +108,7 @@ in
# Restricting what capabilities it has access to which it
# has none.
CapabilityBoundingSet = [ "" ];
AmbientCapability = [ "" ];
AmbientCapabilities = lib.mkForce [ "" ];
# Restrict what address families this service can interact
# with. Since it is a web service, we expect it will only