nixos/gerrit: Enable PrivateUsers hardening in service config

For documentation see https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#PrivateUsers= Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-05 16:06:19 +02:00
parent 1ed557f179
commit 8dac7deb3d
1 changed files with 1 additions and 0 deletions
@@ -237,6 +237,7 @@ in
        PrivateDevices = true;
        PrivateMounts = true;
        PrivateTmp = true;
+        PrivateUsers = true;
        ProtectClock = true;
        ProtectControlGroups = "strict";
        ProtectHome = true;