nixos/paperless: remove django-q workaround

This was long ago migrated to celery
https://github.com/paperless-ngx/paperless-ngx/pull/1648
This commit is contained in:
Sandro Jäckel 2024-12-13 15:47:17 +01:00
parent 22ea194d70
commit b069f4f185
No known key found for this signature in database
GPG Key ID: 3AF5A43A3EECC2E5

View File

@ -70,10 +70,7 @@ let
ProtectKernelModules = true;
ProtectKernelTunables = true;
ProtectProc = "invisible";
# Don't restrict ProcSubset because django-q requires read access to /proc/stat
# to query CPU and memory information.
# Note that /proc only contains processes of user `paperless`, so this is safe.
# ProcSubset = "pid";
ProcSubset = "pid";
RestrictAddressFamilies = [ "AF_UNIX" "AF_INET" "AF_INET6" ];
RestrictNamespaces = true;
RestrictRealtime = true;