vault: set coredump ulimit to 0 · pyrox.dev/nixpkgs@53a3ddf

pyrox.dev / nixpkgs

fork atom

lol

fork atom

vault: set coredump ulimit to 0

authored by

Jelle Besseling and committed by

GitHub 2 years ago 53a3ddfa 04af42f3

1 changed file

expand all

nixos

modules

services

security

vault.nix

nixos/modules/services/security/vault.nix

··· 221 221 ProtectHome = "read-only"; 222 222 AmbientCapabilities = "cap_ipc_lock"; 223 223 NoNewPrivileges = true; 224 + LimitCORE = 0; 224 225 KillSignal = "SIGINT"; 225 226 TimeoutStopSec = "30s"; 226 227 Restart = "on-failure";