From 4066e495b581e7feeef3eace5a57347320cd545b Mon Sep 17 00:00:00 2001
From: Martin Weinelt <hexa@darmstadt.ccc.de>
Date: Mon, 23 Feb 2026 16:17:20 +0100
Subject: [PATCH] nixos/frigate: reduce visible process scope to cgroup

Frigate exposes process metrics using the psutil library and previously
saw all system processes. Reducing the scope to the unit cgroup mimics
the effects upstream gets via its OCI container usage.
---
 nixos/modules/services/video/frigate.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/nixos/modules/services/video/frigate.nix b/nixos/modules/services/video/frigate.nix
index 07b4e7e4cdd1..de418521c3c9 100644
--- a/nixos/modules/services/video/frigate.nix
+++ b/nixos/modules/services/video/frigate.nix
@@ -759,6 +759,9 @@ in
 
         # Sockets/IPC
         RuntimeDirectory = "frigate";
+
+        # Reduce visible process scope to cgroup
+        ProtectProc = "invisible";
       };
     };
   };