BoomMicrophone/nixpkgs-suyu
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

thinkfan: Disable network access

Browse source
This commit is contained in:
rht 2024-01-21 20:53:29 -05:00
parent d49a222c10
commit 25181b596f
No known key found for this signature in database
GPG key ID: 1E76EA93A9B3D3E2
1 changed files with 7 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
nixos/modules/services/hardware/thinkfan.nix
View file

@ -217,8 +217,13 @@ in {
systemd.services = {
thinkfan.environment.THINKFAN_ARGS = escapeShellArgs ([ "-c" configFile ] ++ cfg.extraArgs);
thinkfan.serviceConfig.Restart = "on-failure";
thinkfan.serviceConfig.RestartSec = "30s";
thinkfan.serviceConfig = {
Restart = "on-failure";
RestartSec = "30s";
# Hardening
PrivateNetwork = true;
};
# must be added manually, see issue #81138
thinkfan.wantedBy = [ "multi-user.target" ];