webindex & onion-chef: Run non-network-facing services in PrivateNetwork

2020-05-22 11:29:07 +00:00
parent 7c70dd43ac
commit 3cd61506e0
2 changed files with 2 additions and 0 deletions
@@ -77,6 +77,7 @@ in {
        ExecStart = "${pkgs.bash}/bin/bash ${onion-chef-script}";
        Type = "oneshot";
        RemainAfterExit = true;
+        PrivateNetwork = "true"; # This service needs no network access
      };
    };
  };