demostf/backup-rs
1
0
Fork 0
mirror of https://codeberg.org/demostf/backup.git synced 2026-06-03 09:54:18 +02:00
Code Issues Projects Releases Packages Wiki Activity

module tweaks

Browse source
This commit is contained in:
Robin Appelman 2026-05-31 16:23:45 +02:00
commit 78117b0d68
3 changed files with 6 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

8
flake.lock generated
View file

@ -59,16 +59,16 @@
}, },
"nixpkgs": { "nixpkgs": {
"locked": { "locked": {
"lastModified": 1778430510, "lastModified": 1780051219,
"narHash": "sha256-Ti+ZBvW6yrWWAg2szExVTwCd4qOJ3KlVr1tFHfyfi8Q=", "narHash": "sha256-WnxzG4x47uCgjz+uD+vOzbF+Qid+hKyYdJWbduA9w7g=",
"owner": "NixOS", "owner": "NixOS",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "8fd9daa3db09ced9700431c5b7ad0e8ba199b575", "rev": "e8e446a361172fe838243958325845d0b845c5e5",
"type": "github" "type": "github"
}, },
"original": { "original": {
"id": "nixpkgs", "id": "nixpkgs",
"ref": "nixos-25.11", "ref": "nixos-26.05",
"type": "indirect" "type": "indirect"
} }
}, },

2
flake.nix
View file

@ -1,6 +1,6 @@
{ {
inputs = { inputs = {
nixpkgs.url = "nixpkgs/nixos-25.11"; nixpkgs.url = "nixpkgs/nixos-26.05";
flakelight = { flakelight = {
url = "github:nix-community/flakelight"; url = "github:nix-community/flakelight";
inputs.nixpkgs.follows = "nixpkgs"; inputs.nixpkgs.follows = "nixpkgs";

3
nix/module.nix
View file

@ -90,11 +90,10 @@ in {
ProtectHostname = true; ProtectHostname = true;
LockPersonality = true; LockPersonality = true;
ProtectKernelTunables = true; ProtectKernelTunables = true;
RestrictAddressFamilies = "AF_INET AF_INET6"; RestrictAddressFamilies = ["AF_INET" "AF_INET6" "AF_NETLINK"];
RestrictRealtime = true; RestrictRealtime = true;
ProtectProc = "noaccess"; ProtectProc = "noaccess";
SystemCallFilter = ["@system-service" "~@resources" "~@privileged"]; SystemCallFilter = ["@system-service" "~@resources" "~@privileged"];
IPAddressDeny = "localhost link-local multicast";
}; };
}; };