diff --git a/conf/bookwyrm-server.service b/conf/bookwyrm-server.service index 315d503..17e73b6 100644 --- a/conf/bookwyrm-server.service +++ b/conf/bookwyrm-server.service @@ -29,7 +29,7 @@ ProtectKernelModules=true ProtectKernelLogs=true ProtectControlGroups=true RestrictRealtime=true -RestrictNamespaces=yes +RestrictNamespaces=net NoNewPrivileges=yes RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK