albert/nix
albert/nix
1
0
Fork 0
Code Issues Pull requests Activity Actions

Testing

Browse source
This commit is contained in:
albert 2025-02-04 13:53:56 -08:00
parent b1661c65a5
commit dd4b86aa3c
Signed by: albert
GPG key ID: 3895DD267CA11BA9
1 changed files with 2 additions and 2 deletions

4
nixos/common/services/forgejo-runner.nix
View file

@ -41,9 +41,9 @@
allow-host-namespace = false; allow-host-namespace = false;
}; };
docker-opts = [ docker-opts = [
"--cap-drop=ALL" # Drop all caps first "--cap-drop=ALL" # Drop all caps first
"--cap-add=NET_ADMIN" # Required for TUN device access
"--security-opt=no-new-privileges" "--security-opt=no-new-privileges"
"--cap-add=NET_ADMIN" # Required for TUN device access
]; ];
}; };
}; };