nixos/redmine: Add PrivateMounts to systemd unit settings (#361065)

This commit is contained in:
Aaron Andersen
2024-12-05 21:36:41 -05:00
committed by GitHub
+1
View File
@@ -442,6 +442,7 @@ in
MemoryDenyWriteExecute = true;
NoNewPrivileges = true;
PrivateDevices = true;
PrivateMounts = true;
PrivateTmp = true;
ProcSubset = "pid";
ProtectClock = true;