diff options
| author | Steve Purcell <steve@sanityinc.com> | 2021-09-27 16:07:10 +0200 |
|---|---|---|
| committer | Alyssa Ross <hi@alyssa.is> | 2021-09-29 14:21:13 +0000 |
| commit | 4b518f4aa95b7fe3589c57e2c9604fb65d74b0af (patch) | |
| tree | 7e3b1c3d0762bc6f675b4c9cdafd9d7f139a8fe8 /nixos/modules | |
| parent | 9d340e65c1d56033f9867369fbeface26b1123a7 (diff) | |
| download | nixpkgs-4b518f4aa95b7fe3589c57e2c9604fb65d74b0af.tar nixpkgs-4b518f4aa95b7fe3589c57e2c9604fb65d74b0af.tar.gz nixpkgs-4b518f4aa95b7fe3589c57e2c9604fb65d74b0af.tar.bz2 nixpkgs-4b518f4aa95b7fe3589c57e2c9604fb65d74b0af.tar.lz nixpkgs-4b518f4aa95b7fe3589c57e2c9604fb65d74b0af.tar.xz nixpkgs-4b518f4aa95b7fe3589c57e2c9604fb65d74b0af.tar.zst nixpkgs-4b518f4aa95b7fe3589c57e2c9604fb65d74b0af.zip | |
n8n: remove systemd option incompatible with nodejs
The MemoryDenyWriteExecute systemd option is widely known to be incompatible with nodejs, and causes service crashes as reported in #119687. Fixes #119687.
Diffstat (limited to 'nixos/modules')
| -rw-r--r-- | nixos/modules/services/misc/n8n.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/nixos/modules/services/misc/n8n.nix b/nixos/modules/services/misc/n8n.nix index 516d0f70ef0..27616e5f822 100644 --- a/nixos/modules/services/misc/n8n.nix +++ b/nixos/modules/services/misc/n8n.nix @@ -66,7 +66,7 @@ in RestrictNamespaces = "yes"; RestrictRealtime = "yes"; RestrictSUIDSGID = "yes"; - MemoryDenyWriteExecute = "yes"; + MemoryDenyWriteExecute = "no"; # v8 JIT requires memory segments to be Writable-Executable. LockPersonality = "yes"; }; }; |