nixos/readeck: add back MemoryDenyWriteExecute

SQLite driver is reverted to its CGO version so this can be enabled

linsui 17f95268 49860b21

Changed files
+1
nixos
modules
services
web-apps
+1
nixos/modules/services/web-apps/readeck.nix
···
ExecStart = "${lib.getExe cfg.package} serve -config ${configFile}";
ProtectSystem = "full";
SystemCallArchitectures = "native";
+
MemoryDenyWriteExecute = true;
NoNewPrivileges = true;
PrivateTmp = true;
PrivateDevices = true;