thinkfan: Disable network access

2024-01-21 21:09:01 -05:00
parent d49a222c10
commit 25181b596f
1 changed files with 7 additions and 2 deletions
@@ -217,8 +217,13 @@ in {

    systemd.services = {
      thinkfan.environment.THINKFAN_ARGS = escapeShellArgs ([ "-c" configFile ] ++ cfg.extraArgs);
-      thinkfan.serviceConfig.Restart = "on-failure";
-      thinkfan.serviceConfig.RestartSec = "30s";
+      thinkfan.serviceConfig = {
+        Restart = "on-failure";
+        RestartSec = "30s";
+
+        # Hardening
+        PrivateNetwork = true;
+      };

      # must be added manually, see issue #81138
      thinkfan.wantedBy = [ "multi-user.target" ];