modules/sharkey: Ensure, that it can access the host's CPUs HEAD main

This is, for some reason, needed for image uploads to sharkey.

1 files changed, 2 insertions, 1 deletions

diff --git a/modules/by-name/sh/sharkey/module.nix b/modules/by-name/sh/sharkey/module.nix
index a2f5445..29bae51 100644
--- a/modules/by-name/sh/sharkey/module.nix
+++ b/modules/by-name/sh/sharkey/module.nix
@@ -242,7 +242,8 @@ in {
         MemoryDenyWriteExecute = false;
         PrivateDevices = true;
         PrivateUsers = true;
-        ProcSubset = "pid";
+        # Sharkey needs access to the hosts CPUs
+        ProcSubset = "all";
         PrivateTmp = true;
         ProtectClock = true;
         ProtectControlGroups = true;