summary refs log tree commit diff
path: root/nixos/modules/services/web-servers
diff options
context:
space:
mode:
authorIzorkin <izorkin@elven.pw>2020-09-10 08:19:20 +0300
committerIzorkin <izorkin@elven.pw>2020-09-10 08:19:20 +0300
commit535896671b66d308df3ce467c94f8a9fecfdffea (patch)
tree273b13f2eceead6838a852652c1d0994ccd49d12 /nixos/modules/services/web-servers
parent940195c0e7bebb0d0a08f979af8b82c5c4ba96aa (diff)
downloadnixpkgs-535896671b66d308df3ce467c94f8a9fecfdffea.tar
nixpkgs-535896671b66d308df3ce467c94f8a9fecfdffea.tar.gz
nixpkgs-535896671b66d308df3ce467c94f8a9fecfdffea.tar.bz2
nixpkgs-535896671b66d308df3ce467c94f8a9fecfdffea.tar.lz
nixpkgs-535896671b66d308df3ce467c94f8a9fecfdffea.tar.xz
nixpkgs-535896671b66d308df3ce467c94f8a9fecfdffea.tar.zst
nixpkgs-535896671b66d308df3ce467c94f8a9fecfdffea.zip
nixos/nginx: remove option enableSandbox
Diffstat (limited to 'nixos/modules/services/web-servers')
-rw-r--r--nixos/modules/services/web-servers/nginx/default.nix9
1 files changed, 0 insertions, 9 deletions
diff --git a/nixos/modules/services/web-servers/nginx/default.nix b/nixos/modules/services/web-servers/nginx/default.nix
index 975b56d4782..39bcb14e5af 100644
--- a/nixos/modules/services/web-servers/nginx/default.nix
+++ b/nixos/modules/services/web-servers/nginx/default.nix
@@ -463,14 +463,6 @@ in
         '';
       };
 
-      enableSandbox = mkOption {
-        default = false;
-        type = types.bool;
-        description = ''
-          Starting Nginx web server with additional sandbox/hardening options.
-        '';
-      };
-
       user = mkOption {
         type = types.str;
         default = "nginx";
@@ -728,7 +720,6 @@ in
         CapabilityBoundingSet = [ "CAP_NET_BIND_SERVICE" "CAP_SYS_RESOURCE" ];
         # Security
         NoNewPrivileges = true;
-      } // optionalAttrs cfg.enableSandbox {
         # Sandboxing
         ProtectSystem = "strict";
         ProtectHome = mkDefault true;