From 1631e6056ef5e3ef187aa4b90b4679c79ea47dad Mon Sep 17 00:00:00 2001
From: Felix Singer <felixsinger@posteo.net>
Date: Mon, 2 Dec 2024 13:02:53 +0100
Subject: [PATCH] nixos/redmine: Add PrivateMounts to systemd unit settings

PrivateMounts seems to be enabled anyway. It's probably enabled by
another setting. However, in order to not create a wrong impression, add
it to the list and enable it.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
---
 nixos/modules/services/misc/redmine.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixos/modules/services/misc/redmine.nix b/nixos/modules/services/misc/redmine.nix
index 4cd2f35113ec..c53157fafd2a 100644
--- a/nixos/modules/services/misc/redmine.nix
+++ b/nixos/modules/services/misc/redmine.nix
@@ -442,6 +442,7 @@ in
         MemoryDenyWriteExecute = true;
         NoNewPrivileges = true;
         PrivateDevices = true;
+        PrivateMounts = true;
         PrivateTmp = true;
         ProcSubset = "pid";
         ProtectClock = true;