Merge pull request 'actions-runner: apply systemd hardening' (#6) from test into main

Reviewed-on: clan/clan-infra#6
2023-07-13 12:55:06 +00:00 · 2023-07-13 12:55:06 +00:00 · 2bf0ef697d
commit 2bf0ef697d
parent 4bd83a8f11 7bc535ab31
2 changed files with 9 additions and 5 deletions
--- a/modules/web01/gitea/actions-runner.nix
+++ b/modules/web01/gitea/actions-runner.nix
@ -62,6 +62,10 @@
        "~@obsolete"
        "~@raw-io"
        "~@reboot"
+        "~@swap"
+        # needed by go?
+        #"~@resources"
+        "~@privileged"
        "~capset"
        "~setdomainname"
        "~sethostname"
--- a/targets/web01/terraform.tfstate
+++ b/targets/web01/terraform.tfstate