mirror of https://git.jolheiser.com/ugit.git
Compare commits
No commits in common. "f7bcb117923e3b528ff86d7e29427ae10bf88da2" and "9358d37e07ea6c87221d1724a58461246d6c3068" have entirely different histories.
f7bcb11792
...
9358d37e07
|
@ -45,5 +45,9 @@
|
|||
}
|
||||
|
||||
.code>.chroma {
|
||||
@apply text-sm p-3 rounded;
|
||||
@apply text-sm p-3 rounded overflow-scroll;
|
||||
}
|
||||
|
||||
.chroma .line {
|
||||
@apply overflow-scroll
|
||||
}
|
File diff suppressed because one or more lines are too long
|
@ -140,33 +140,6 @@ in
|
|||
Restart = "always";
|
||||
RestartSec = "15";
|
||||
WorkingDirectory = instanceCfg.homeDir;
|
||||
ReadWritePaths = [ instanceCfg.homeDir ];
|
||||
CapabilityBoundingSet = "";
|
||||
NoNewPrivileges = true;
|
||||
ProtectSystem = "strict";
|
||||
ProtectHome = true;
|
||||
PrivateTmp = true;
|
||||
PrivateDevices = true;
|
||||
PrivateUsers = true;
|
||||
ProtectHostname = true;
|
||||
ProtectClock = true;
|
||||
ProtectKernelTunables = true;
|
||||
ProtectKernelModules = true;
|
||||
ProtectKernelLogs = true;
|
||||
ProtectControlGroups = true;
|
||||
RestrictAddressFamilies = [
|
||||
"AF_UNIX"
|
||||
"AF_INET"
|
||||
"AF_INET6"
|
||||
];
|
||||
RestrictNamespaces = true;
|
||||
LockPersonality = true;
|
||||
MemoryDenyWriteExecute = true;
|
||||
RestrictRealtime = true;
|
||||
RestrictSUIDSGID = true;
|
||||
RemoveIPC = true;
|
||||
PrivateMounts = true;
|
||||
SystemCallArchitectures = "native";
|
||||
ExecStart =
|
||||
let
|
||||
configFile = pkgs.writeText "ugit-${name}.yaml" (
|
||||
|
|
Loading…
Reference in New Issue