commit 53a3ddfab88c4e45be8fe4d69f70fa11672c2c90 · tjh.dev/nixpkgs

tjh.dev / nixpkgs

Clone of https://github.com/NixOS/nixpkgs.git (to stress-test knotserver)

fork atom

vault: set coredump ulimit to 0

authored by Jelle Besseling and committed by GitHub 2 years ago 53a3ddfa 04af42f3

1 changed file

expand all

unified split

nixos

modules

services

security

vault.nix

nixos/modules/services/security/vault.nix

··· 221 221 ProtectHome = "read-only"; 222 222 AmbientCapabilities = "cap_ipc_lock"; 223 223 NoNewPrivileges = true; 224 + LimitCORE = 0; 224 225 KillSignal = "SIGINT"; 225 226 TimeoutStopSec = "30s"; 226 227 Restart = "on-failure";