From ee9fdd67b9cbd6aaf1ec797acc5ddcdb5ab863b1 Mon Sep 17 00:00:00 2001
From: Florian Schubert <30634234+JamesofScout@users.noreply.github.com>
Date: Sat, 6 Sep 2025 17:21:17 +0200
Subject: [PATCH] nixos/traefik: change LimitNPROC to TasksMax

NPROC is per UID, which can cause problems in containerized setups; TasksMax
should be preferred as it is only for this service and not the UID.
---
 nixos/modules/services/web-servers/traefik.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/modules/services/web-servers/traefik.nix b/nixos/modules/services/web-servers/traefik.nix
index a44c89ba7d70..2f7e6611c342 100644
--- a/nixos/modules/services/web-servers/traefik.nix
+++ b/nixos/modules/services/web-servers/traefik.nix
@@ -466,7 +466,7 @@ in
         AmbientCapabilities = "cap_net_bind_service";
         CapabilityBoundingSet = "cap_net_bind_service";
         NoNewPrivileges = true;
-        LimitNPROC = 64;
+        TasksMax = 64;
         LimitNOFILE = 1048576;
         PrivateTmp = true;
         PrivateDevices = true;