What's the general opinion of the #Nix community on hardening systemd services? Aka. adding isolation and restriction properties?
Is there a reason it is currently not that commonly done? Would PRs i...
@nprofile1q... For sure they'd be accepted. Many important services are hardened, the ones that don't I guess the maintainer didn't bother, but if you add sensible options, yeah go for it.