pyrox.dev / nixpkgs
lol
fork atom

vault: set coredump ulimit to 0

Jelle Besseling 53a3ddfa 04af42f3

options
unified split
Changed files
+1
nixos
modules
services
security
vault.nix
+1
nixos/modules/services/security/vault.nix 
···

       
221

       
 

       
        ProtectHome = "read-only";


     

       
222

       
 

       
        AmbientCapabilities = "cap_ipc_lock";


     

       
223

       
 

       
        NoNewPrivileges = true;


     

       

       

       
     

       
224

       
 

       
        KillSignal = "SIGINT";


     

       
225

       
 

       
        TimeoutStopSec = "30s";


     

       
226

       
 

       
        Restart = "on-failure";


     
···

       
221

       
 

       
        ProtectHome = "read-only";


     

       
222

       
 

       
        AmbientCapabilities = "cap_ipc_lock";


     

       
223

       
 

       
        NoNewPrivileges = true;


     

       
224

       
+

       
        LimitCORE = 0;


     

       
225

       
 

       
        KillSignal = "SIGINT";


     

       
226

       
 

       
        TimeoutStopSec = "30s";


     

       
227

       
 

       
        Restart = "on-failure";