diff --git a/nixos/modules/services/web-apps/gerrit.nix b/nixos/modules/services/web-apps/gerrit.nix index c1af294c7cd8..fd810d07883f 100644 --- a/nixos/modules/services/web-apps/gerrit.nix +++ b/nixos/modules/services/web-apps/gerrit.nix @@ -232,6 +232,7 @@ in AmbientCapabilities = ""; CapabilityBoundingSet = ""; LockPersonality = true; + MountAPIVFS = true; NoNewPrivileges = true; PrivateDevices = true; PrivateMounts = true;