nixos/redmine: Set ProtectProc to invisible

For documentation see https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectProc= Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-10-07 16:16:26 +02:00
parent fdf1ba03bb
commit a799bd0e3d
1 changed files with 1 additions and 1 deletions
@@ -473,7 +473,7 @@ in
        ProtectKernelLogs = true;
        ProtectKernelModules = true;
        ProtectKernelTunables = true;
-        ProtectProc = "noaccess";
+        ProtectProc = "invisible";
        ProtectSystem = "strict";
        ReadWritePaths = [
          cfg.stateDir