simon/nixos-config
simon/nixos-config
1
1
Fork 0
Code Issues 8 Pull requests Actions Projects Activity

qbittorrent: Avoid using nscd

Browse source
This commit is contained in:
Simon Bruder 2023-10-04 17:01:35 +02:00
parent 7fc8a4694c
commit 3a12a3f53a
Signed by: simon
GPG key ID: 8D3C82F9F309F8EC
1 changed files with 10 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
modules/qbittorrent/default.nix
View file

@ -94,6 +94,16 @@ in
# Increase number of open file descriptors (default: 1024) # Increase number of open file descriptors (default: 1024)
LimitNOFILE = 65536; LimitNOFILE = 65536;
# Avoid using nscd (leaks dns)
InaccessiblePaths = [
"/run/nscd"
];
# Make correct resolv.conf available for unit
BindReadOnlyPaths = [
"/etc/netns/qbittorrent/resolv.conf:/etc/resolv.conf"
];
# systemd-analyze --no-pager security qbittorrent.service # systemd-analyze --no-pager security qbittorrent.service
CapabilityBoundingSet = null; CapabilityBoundingSet = null;
PrivateDevices = true; PrivateDevices = true;