aboutsummaryrefslogtreecommitdiffstats
path: root/roles
diff options
context:
space:
mode:
authorJan Tuomi <jan@jantuomi.fi>2026-08-12 13:06:02 +0300
committerJan Tuomi <jan@jantuomi.fi>2026-08-12 13:06:02 +0300
commit8a008dd67243b03ae7c13f00e5006987fd266f04 (patch)
tree9451a1483733e82f3128aa05202798b141babe09 /roles
parent469afb98140c2a33ecd0124381035423a2006e1e (diff)
Remove unnecessary permissions from immich jail
Diffstat (limited to 'roles')
-rw-r--r--roles/jails/20_immich/templates/jail.conf.j27
1 files changed, 0 insertions, 7 deletions
diff --git a/roles/jails/20_immich/templates/jail.conf.j2 b/roles/jails/20_immich/templates/jail.conf.j2
index fb7f363..47a0454 100644
--- a/roles/jails/20_immich/templates/jail.conf.j2
+++ b/roles/jails/20_immich/templates/jail.conf.j2
@@ -1,15 +1,8 @@
{{ jail.name }} {
vnet;
- persist;
exec.clean;
allow.raw_sockets;
mount.devfs;
- allow.mount;
- allow.mount.devfs;
- allow.mount.linprocfs;
- allow.mount.linsysfs;
- allow.mount.tmpfs;
- allow.mount.nullfs;
enforce_statfs = 1;
devfs_ruleset = 4;