diff --git a/util/nats-server-hardened.service b/util/nats-server-hardened.service index 93872d64..1bd6ed16 100644 --- a/util/nats-server-hardened.service +++ b/util/nats-server-hardened.service @@ -12,7 +12,8 @@ Group=nats # Hardening CapabilityBoundingSet= -LimitNOFILE=800000 # JetStream requires 2 FDs open per stream. +# JetStream requires 2 FDs open per stream. +LimitNOFILE=800000 LockPersonality=true MemoryDenyWriteExecute=true NoNewPrivileges=true