albert/nix
albert/nix
1
0
Fork 0
Code Issues Pull requests Activity Actions

Testing security isues

Browse source
This commit is contained in:
albert 2025-02-05 10:39:13 -08:00
parent f6d7c29132
commit 4469baaf08
Signed by: albert
GPG key ID: 3895DD267CA11BA9
1 changed files with 2 additions and 2 deletions

4
nixos/common/services/forgejo-runner.nix
View file

@ -42,8 +42,8 @@
allow-host-namespace = false;
};
docker-opts = [
"--cap-drop=ALL" # Drop all caps first
"--security-opt=no-new-privileges"
# "--cap-drop=ALL" # Drop all caps first
# "--security-opt=no-new-privileges"
"--cap-add=NET_ADMIN" # Required for TUN device access
];
};