diff --git a/modules/actual-server/default.nix b/modules/actual-server/default.nix index e834c66..867bb2d 100644 --- a/modules/actual-server/default.nix +++ b/modules/actual-server/default.nix @@ -18,33 +18,4 @@ RestartSec = 3; }; }; - - # hardening - RestrictAddressFamilies = [ - "AF_INET" - "AF_INET6" - "AF_UNIX" - "AF_NETLINK" - ]; - PrivateTmp = true; - PrivateUsers = true; - ProtectClock = true; - ProtectControlGroups = true; - ProtectHome = true; - ProtectKernelLogs = true; - ProtectKernelModules = true; - ProtectKernelTunables = true; - ProtectSystem = "strict"; - RemoveIPC = true; - RestrictNamespaces = true; - RestrictRealtime = true; - RestrictSUIDSGID = true; - SystemCallArchitectures = "native"; - SystemCallFilter = [ - "@system-service" - "~@resources" - ]; - ProtectProc = "invisible"; - ProtectHostname = true; - UMask = "0077"; }