diff options
| author | Alexandre Iooss <erdnaxe@crans.org> | 2021-08-08 16:48:49 +0200 |
|---|---|---|
| committer | Alexandre Iooss <erdnaxe@crans.org> | 2021-10-07 10:19:55 +0200 |
| commit | 9fea6d4c8551b7c8783f23e011a2ba113c95d0dd (patch) | |
| tree | 72ab5177823179feee672b615385f6cf72488beb /nixos/modules/services/monitoring/prometheus/exporters/kea.nix | |
| parent | 9544c029c082a7e545ec75c101f0202f18eb3874 (diff) | |
| download | nixpkgs-9fea6d4c8551b7c8783f23e011a2ba113c95d0dd.tar nixpkgs-9fea6d4c8551b7c8783f23e011a2ba113c95d0dd.tar.gz nixpkgs-9fea6d4c8551b7c8783f23e011a2ba113c95d0dd.tar.bz2 nixpkgs-9fea6d4c8551b7c8783f23e011a2ba113c95d0dd.tar.lz nixpkgs-9fea6d4c8551b7c8783f23e011a2ba113c95d0dd.tar.xz nixpkgs-9fea6d4c8551b7c8783f23e011a2ba113c95d0dd.tar.zst nixpkgs-9fea6d4c8551b7c8783f23e011a2ba113c95d0dd.zip | |
nixos/prometheus: systemd unit hardening of exporters
Diffstat (limited to 'nixos/modules/services/monitoring/prometheus/exporters/kea.nix')
| -rw-r--r-- | nixos/modules/services/monitoring/prometheus/exporters/kea.nix | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/nixos/modules/services/monitoring/prometheus/exporters/kea.nix b/nixos/modules/services/monitoring/prometheus/exporters/kea.nix index 0571325c5d9..27aeb909624 100644 --- a/nixos/modules/services/monitoring/prometheus/exporters/kea.nix +++ b/nixos/modules/services/monitoring/prometheus/exporters/kea.nix @@ -34,6 +34,10 @@ in { ${concatStringsSep " \\n" cfg.controlSocketPaths} ''; SupplementaryGroups = [ "kea" ]; + RestrictAddressFamilies = [ + # Need AF_UNIX to collect data + "AF_UNIX" + ]; }; }; } |