diff --git a/module.nix b/module.nix index 54ebd80..3ecaeb0 100644 --- a/module.nix +++ b/module.nix @@ -70,16 +70,16 @@ in { serviceConfig = { ExecStart = "${pricebot}/bin/pricebot"; DynamicUser = true; - # PrivateTmp = true; - # PrivateDevices = true; - # ProtectSystem = "strict"; - # ProtectControlGroups = true; - # ProtectKernelTunables = true; - # ProtectKernelModules = true; - # ProtectHostname = true; - # ProtectHome = true; - # ProtectClock = true; - # ProtectKernelLogs = true; + PrivateTmp = true; + PrivateDevices = true; + ProtectSystem = "strict"; + ProtectControlGroups = true; + ProtectKernelTunables = true; + ProtectKernelModules = true; + ProtectHostname = true; + ProtectHome = true; + ProtectClock = true; + ProtectKernelLogs = true; Restart = "always"; StandardOutput = "journal"; };