nixos/redmine: Add PrivateMounts to systemd unit settings

PrivateMounts seems to be enabled anyway. It's probably enabled by
another setting. However, in order to not create a wrong impression, add
it to the list and enable it.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
This commit is contained in:
Felix Singer 2024-12-02 13:02:53 +01:00
parent b3e823fc96
commit 1631e6056e

View File

@ -442,6 +442,7 @@ in
MemoryDenyWriteExecute = true;
NoNewPrivileges = true;
PrivateDevices = true;
PrivateMounts = true;
PrivateTmp = true;
ProcSubset = "pid";
ProtectClock = true;