summaryrefslogtreecommitdiff
path: root/hosts
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2022-01-01 17:13:57 +0100
committerGregor Kleen <gkleen@yggdrasil.li>2022-01-01 17:13:57 +0100
commit47d420a8db254ee2381f491e2b67b5290d093d93 (patch)
treec2ad002107b0d0edc6a663fca348cbf6463c8589 /hosts
parent20a5b98a3acd1ebfc1c30f4897662b41e7ec966d (diff)
downloadnixos-47d420a8db254ee2381f491e2b67b5290d093d93.tar
nixos-47d420a8db254ee2381f491e2b67b5290d093d93.tar.gz
nixos-47d420a8db254ee2381f491e2b67b5290d093d93.tar.bz2
nixos-47d420a8db254ee2381f491e2b67b5290d093d93.tar.xz
nixos-47d420a8db254ee2381f491e2b67b5290d093d93.zip
...
Diffstat (limited to 'hosts')
-rw-r--r--hosts/vidhar/prometheus/default.nix12
1 files changed, 6 insertions, 6 deletions
diff --git a/hosts/vidhar/prometheus/default.nix b/hosts/vidhar/prometheus/default.nix
index 51ead7e2..780d30ce 100644
--- a/hosts/vidhar/prometheus/default.nix
+++ b/hosts/vidhar/prometheus/default.nix
@@ -214,12 +214,12 @@ in {
214 # DynamicUser = true; 214 # DynamicUser = true;
215 # DeviceAllow = [""]; 215 # DeviceAllow = [""];
216 # LockPersonality = true; 216 # LockPersonality = true;
217 # MemoryDenyWriteExecute = true; 217 MemoryDenyWriteExecute = true;
218 # NoNewPrivileges = true; 218 NoNewPrivileges = true;
219 # PrivateDevices = true; 219 PrivateDevices = true;
220 # ProtectClock = true; 220 ProtectClock = true;
221 # ProtectControlGroups = true; 221 ProtectControlGroups = true;
222 # ProtectHome = true; 222 ProtectHome = true;
223 ProtectHostname = true; 223 ProtectHostname = true;
224 ProtectKernelLogs = true; 224 ProtectKernelLogs = true;
225 ProtectKernelModules = true; 225 ProtectKernelModules = true;