Félix Baylac-Jacqué 353a8b58e6
nixos/prosody: leverage systemd sandbox features to harden service
We are leveraging the systemd sandboxing features to prevent the
service accessing locations it shouldn't do. Most notably, we are here
preventing the prosody service from accessing /home and providing it
with a private /dev and /tmp.

Please consult man systemd.exec for further informations.
2020-04-30 20:40:00 +02:00
..
2019-01-30 15:59:01 +01:00
2019-08-28 08:26:42 +02:00
2019-10-12 22:25:28 +02:00
2019-03-24 21:13:19 +01:00
2019-05-31 01:21:18 +02:00
2019-08-28 08:26:42 +02:00
2019-03-01 11:10:44 +02:00
2020-01-16 12:38:36 -08:00
2018-04-26 13:57:11 +03:00
2019-12-04 17:09:53 +01:00
2017-09-09 00:29:46 +02:00
2019-04-29 14:05:50 +02:00
2018-07-20 18:48:37 +00:00
2019-03-24 21:15:26 +01:00
2020-02-19 13:15:28 +01:00
2020-02-12 16:36:42 +00:00
2019-03-24 21:15:27 +01:00
2019-10-12 22:25:28 +02:00
2019-10-10 19:11:31 +02:00
2020-01-08 23:18:26 +01:00
2018-02-20 10:14:55 +00:00
2020-01-31 20:40:48 +01:00
2019-03-24 21:15:28 +01:00
2018-11-07 14:51:45 +02:00
2020-04-02 13:06:21 +01:00
2020-02-14 12:51:50 +08:00
2019-12-04 17:09:53 +01:00
2019-08-26 21:40:19 +00:00
2020-03-27 19:31:01 +01:00
2019-03-24 21:15:28 +01:00
2020-04-05 15:30:08 +02:00
2019-12-04 17:09:53 +01:00
2020-03-05 00:01:44 +01:00
2020-03-05 00:01:44 +01:00
2020-02-28 15:32:36 +00:00
2019-10-25 16:19:57 +02:00
2019-09-03 00:30:12 +02:00
2019-04-23 22:52:23 +02:00
2019-10-12 22:25:28 +02:00
2019-11-01 10:57:29 +01:00
2019-12-12 23:49:47 +00:00
2020-01-11 16:08:45 +01:00
2019-03-24 21:15:29 +01:00
2019-08-26 21:40:19 +00:00