nixos/frigate: reduce visible process scope to cgroup

Frigate exposes process metrics using the psutil library and previously saw all system processes. Reducing the scope to the unit cgroup mimics the effects upstream gets via its OCI container usage.
2026-02-23 16:17:20 +01:00
parent ae72b9bf27
commit 4066e495b5
1 changed files with 3 additions and 0 deletions
@@ -759,6 +759,9 @@ in

        # Sockets/IPC
        RuntimeDirectory = "frigate";
+
+        # Reduce visible process scope to cgroup
+        ProtectProc = "invisible";
      };
    };
  };