diff --git a/modules/nix-bitcoin-services.nix b/modules/nix-bitcoin-services.nix index 9ed5926..c3607cd 100644 --- a/modules/nix-bitcoin-services.nix +++ b/modules/nix-bitcoin-services.nix @@ -14,6 +14,7 @@ let ProtectKernelModules = "true"; ProtectControlGroups = "true"; RestrictAddressFamilies = "AF_UNIX AF_INET AF_INET6"; + RestrictNamespaces = "true"; LockPersonality = "true"; IPAddressDeny = "any"; };