nixos/traefik: change LimitNPROC to TasksMax
NPROC is per UID, which can cause problems in containerized setups; TasksMax should be preferred as it is only for this service and not the UID.
This commit is contained in:
committed by
Fernando Rodrigues
parent
3191e450f2
commit
ee9fdd67b9
@@ -466,7 +466,7 @@ in
|
||||
AmbientCapabilities = "cap_net_bind_service";
|
||||
CapabilityBoundingSet = "cap_net_bind_service";
|
||||
NoNewPrivileges = true;
|
||||
LimitNPROC = 64;
|
||||
TasksMax = 64;
|
||||
LimitNOFILE = 1048576;
|
||||
PrivateTmp = true;
|
||||
PrivateDevices = true;
|
||||
|
||||
Reference in New Issue
Block a user