From 8a008dd67243b03ae7c13f00e5006987fd266f04 Mon Sep 17 00:00:00 2001
From: Jan Tuomi <jan@jantuomi.fi>
Date: Wed, 12 Aug 2026 13:06:02 +0300
Subject: Remove unnecessary permissions from immich jail

---
 roles/jails/20_immich/templates/jail.conf.j2 | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/roles/jails/20_immich/templates/jail.conf.j2 b/roles/jails/20_immich/templates/jail.conf.j2
index fb7f363..47a0454 100644
--- a/roles/jails/20_immich/templates/jail.conf.j2
+++ b/roles/jails/20_immich/templates/jail.conf.j2
@@ -1,15 +1,8 @@
 {{ jail.name }} {
   vnet;
-  persist;
   exec.clean;
   allow.raw_sockets;
   mount.devfs;
-  allow.mount;
-  allow.mount.devfs;
-  allow.mount.linprocfs;
-  allow.mount.linsysfs;
-  allow.mount.tmpfs;
-  allow.mount.nullfs;
   enforce_statfs = 1;
 
   devfs_ruleset = 4;
-- 
cgit v1.3