thinkfan: Disable network access

This commit is contained in:
rht 2024-01-21 20:53:29 -05:00
parent d49a222c10
commit 25181b596f
No known key found for this signature in database
GPG key ID: 1E76EA93A9B3D3E2

View file

@ -217,8 +217,13 @@ in {
systemd.services = { systemd.services = {
thinkfan.environment.THINKFAN_ARGS = escapeShellArgs ([ "-c" configFile ] ++ cfg.extraArgs); thinkfan.environment.THINKFAN_ARGS = escapeShellArgs ([ "-c" configFile ] ++ cfg.extraArgs);
thinkfan.serviceConfig.Restart = "on-failure"; thinkfan.serviceConfig = {
thinkfan.serviceConfig.RestartSec = "30s"; Restart = "on-failure";
RestartSec = "30s";
# Hardening
PrivateNetwork = true;
};
# must be added manually, see issue #81138 # must be added manually, see issue #81138
thinkfan.wantedBy = [ "multi-user.target" ]; thinkfan.wantedBy = [ "multi-user.target" ];