nixos/traefik: change LimitNPROC to TasksMax

NPROC is per UID, which can cause problems in containerized setups; TasksMax
should be preferred as it is only for this service and not the UID.
This commit is contained in:
Florian Schubert
2026-01-24 09:17:48 +11:00
committed by Fernando Rodrigues
parent 3191e450f2
commit ee9fdd67b9
@@ -466,7 +466,7 @@ in
AmbientCapabilities = "cap_net_bind_service";
CapabilityBoundingSet = "cap_net_bind_service";
NoNewPrivileges = true;
LimitNPROC = 64;
TasksMax = 64;
LimitNOFILE = 1048576;
PrivateTmp = true;
PrivateDevices = true;