nixos/paperless: remove django-q workaround (#364961)

2024-12-14 12:36:59 +01:00
parent 15247f2015 b069f4f185
commit 59e17a0510
1 changed files with 1 additions and 4 deletions
@@ -70,10 +70,7 @@ let
    ProtectKernelModules = true;
    ProtectKernelTunables = true;
    ProtectProc = "invisible";
-    # Don't restrict ProcSubset because django-q requires read access to /proc/stat
-    # to query CPU and memory information.
-    # Note that /proc only contains processes of user `paperless`, so this is safe.
-    # ProcSubset = "pid";
+    ProcSubset = "pid";
    RestrictAddressFamilies = [ "AF_UNIX" "AF_INET" "AF_INET6" ];
    RestrictNamespaces = true;
    RestrictRealtime = true;