This commit is contained in:
Thomas 2023-11-10 14:31:09 +01:00 committed by GitHub
parent cd1dd022e5
commit f190c961b7
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -14,11 +14,11 @@ ProtectSystem=strict
ProtectHome=tmpfs ProtectHome=tmpfs
InaccessiblePaths=-/media -/mnt -/srv InaccessiblePaths=-/media -/mnt -/srv
PrivateTmp=yes PrivateTmp=yes
TemporaryFileSystem=/run /opt TemporaryFileSystem=/var /run /opt __INSTALL_DIR__
#PrivateUsers=true #PrivateUsers=true
PrivateDevices=true PrivateDevices=true
BindReadOnlyPaths=__INSTALL_DIR__ BindReadOnlyPaths=__INSTALL_DIR__
BindPaths=__INSTALL_DIR__/images __INSTALL_DIR__/static /var/run/postgresql BindPaths=__INSTALL_DIR__/images __INSTALL_DIR__/static /var/run/postgresql __INSTALL_DIR__/venv/bin
LockPersonality=yes LockPersonality=yes
MemoryDenyWriteExecute=true MemoryDenyWriteExecute=true
PrivateMounts=true PrivateMounts=true