nixos/doc: mention postgresql hardening

This commit is contained in:
Maximilian Bosch 2024-11-01 15:44:27 +01:00
parent 0f1e2a1cd8
commit 70a6092f1e
No known key found for this signature in database
2 changed files with 23 additions and 0 deletions

View file

@ -602,6 +602,11 @@
- `iproute2` now has libbpf support.
- `postgresql` is now [hardened by default](#module-services-postgres-hardening) using the common `systemd` settings for that.
If you use extensions that are not packaged in nixpkgs, please review whether it still works
with the current settings and adjust accordingly if needed.
- `nix.channel.enable = false` no longer implies `nix.settings.nix-path = []`.
Since Nix 2.13, a `nix-path` set in `nix.conf` cannot be overriden by the `NIX_PATH` configuration variable.