security: don't restrict process info by default for module users

2020-08-20 13:11:10 +02:00
parent a36789b468
commit 44de5064cd
2 changed files with 36 additions and 31 deletions
--- a/modules/presets/secure-node.nix
+++ b/modules/presets/secure-node.nix
@@ -42,8 +42,7 @@ in {

    networking.firewall.enable = true;

-    # hideProcessInformation even if hardened kernel profile is disabled
-    security.hideProcessInformation = true;
+    nix-bitcoin.security.hideProcessInformation = true;

    # Tor
    services.tor = {