diff options
| author | Dennis Eriksen <d@ennis.no> | 2021-05-03 15:18:23 +0200 |
|---|---|---|
| committer | Dennis Eriksen <d@ennis.no> | 2021-05-03 15:18:23 +0200 |
| commit | 0d47b301e1adbf3e25338f50e176a0bb227a4bff (patch) | |
| tree | 1720fc36968fe039c7b63681a1133d65f4dd7405 | |
| parent | renaming bitwarden_rs to vaultwarden (diff) | |
| download | mkosi-vaultwarden-0d47b301e1adbf3e25338f50e176a0bb227a4bff.tar.gz | |
a few more updates
| -rwxr-xr-x | mkosi.build | 2 | ||||
| -rw-r--r-- | mkosi.extra/etc/systemd/system/vaultwarden.service | 2 | ||||
| -rw-r--r-- | mkosi.nspawn | 3 |
3 files changed, 5 insertions, 2 deletions
diff --git a/mkosi.build b/mkosi.build index 0fac659..85883ac 100755 --- a/mkosi.build +++ b/mkosi.build @@ -5,7 +5,7 @@ export RUSTUP_HOME=/root/.rustup \ PATH=/root/.cargo/bin:$PATH \ RUST_VERSION=1.40.0 \ DB=postgresql \ - VAULT_VERSION=v2.15.1 + VAULT_VERSION=v2.19.0d mkdir /root/src && cd /root/src git clone https://github.com/dani-garcia/vaultwarden.git diff --git a/mkosi.extra/etc/systemd/system/vaultwarden.service b/mkosi.extra/etc/systemd/system/vaultwarden.service index 6000845..b72ea8f 100644 --- a/mkosi.extra/etc/systemd/system/vaultwarden.service +++ b/mkosi.extra/etc/systemd/system/vaultwarden.service @@ -13,7 +13,7 @@ EnvironmentFile=/etc/vaultwarden/vaultwarden.env ExecStart=/usr/local/bin/vaultwarden # Set reasonable connection and process limits LimitNOFILE=1048576 -LimitNPROC=64 +LimitNPROC=128 # Isolate vaultwarden from the rest of the system PrivateTmp=true PrivateDevices=true diff --git a/mkosi.nspawn b/mkosi.nspawn index 6990d4c..21254ed 100644 --- a/mkosi.nspawn +++ b/mkosi.nspawn @@ -6,6 +6,9 @@ NoNewPrivileges=yes PrivateUsers=pick LinkJournal=try-host +# 65536*443 +PrivateUsers=29032448 + [Files] PrivateUsersChown=true BindReadOnly=/etc/vaultwarden/vaultwarden.env |