diff options
author | Gregor Kleen <gkleen@yggdrasil.li> | 2022-01-01 17:13:57 +0100 |
---|---|---|
committer | Gregor Kleen <gkleen@yggdrasil.li> | 2022-01-01 17:13:57 +0100 |
commit | 47d420a8db254ee2381f491e2b67b5290d093d93 (patch) | |
tree | c2ad002107b0d0edc6a663fca348cbf6463c8589 /hosts | |
parent | 20a5b98a3acd1ebfc1c30f4897662b41e7ec966d (diff) | |
download | nixos-47d420a8db254ee2381f491e2b67b5290d093d93.tar nixos-47d420a8db254ee2381f491e2b67b5290d093d93.tar.gz nixos-47d420a8db254ee2381f491e2b67b5290d093d93.tar.bz2 nixos-47d420a8db254ee2381f491e2b67b5290d093d93.tar.xz nixos-47d420a8db254ee2381f491e2b67b5290d093d93.zip |
...
Diffstat (limited to 'hosts')
-rw-r--r-- | hosts/vidhar/prometheus/default.nix | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/hosts/vidhar/prometheus/default.nix b/hosts/vidhar/prometheus/default.nix index 51ead7e2..780d30ce 100644 --- a/hosts/vidhar/prometheus/default.nix +++ b/hosts/vidhar/prometheus/default.nix | |||
@@ -214,12 +214,12 @@ in { | |||
214 | # DynamicUser = true; | 214 | # DynamicUser = true; |
215 | # DeviceAllow = [""]; | 215 | # DeviceAllow = [""]; |
216 | # LockPersonality = true; | 216 | # LockPersonality = true; |
217 | # MemoryDenyWriteExecute = true; | 217 | MemoryDenyWriteExecute = true; |
218 | # NoNewPrivileges = true; | 218 | NoNewPrivileges = true; |
219 | # PrivateDevices = true; | 219 | PrivateDevices = true; |
220 | # ProtectClock = true; | 220 | ProtectClock = true; |
221 | # ProtectControlGroups = true; | 221 | ProtectControlGroups = true; |
222 | # ProtectHome = true; | 222 | ProtectHome = true; |
223 | ProtectHostname = true; | 223 | ProtectHostname = true; |
224 | ProtectKernelLogs = true; | 224 | ProtectKernelLogs = true; |
225 | ProtectKernelModules = true; | 225 | ProtectKernelModules = true; |