pyrox.dev / nixpkgs
lol
fork atom

nixos/jitsi-meet: fix systemd protection flag warning

Fixes systemd warning:

> /etc/systemd/system/jitsi-excalidraw.service:26: Failed to parse ProtectProc=true, ignoring: Invalid argument

when Jitsi-Meet Excalidraw Backend is enabled. `ProtectProc=true` is not a thing according to man pages, `ProtectProc=noaccess` is the most restrictive setting and likely what was originally intentioned.

Erin of Yukis 1ec5da1a 63b8f960

options
unified split
Changed files
+1 -1
nixos
modules
services
web-apps
jitsi-meet.nix
+1 -1
nixos/modules/services/web-apps/jitsi-meet.nix 
···

       
528

       
 

       
        ProtectSystem = "strict";


     

       
529

       
 

       
        ProtectClock = true;


     

       
530

       
 

       
        ProtectHome = true;


     

       
531

       
-

       
        ProtectProc = true;


     

       
532

       
 

       
        ProtectKernelLogs = true;


     

       
533

       
 

       
        PrivateTmp = true;


     

       
534

       
 

       
        PrivateDevices = true;


     
···

       
528

       
 

       
        ProtectSystem = "strict";


     

       
529

       
 

       
        ProtectClock = true;


     

       
530

       
 

       
        ProtectHome = true;


     

       
531

       
+

       
        ProtectProc = "noaccess";


     

       
532

       
 

       
        ProtectKernelLogs = true;


     

       
533

       
 

       
        PrivateTmp = true;


     

       
534

       
 

       
        PrivateDevices = true;