all repos — nixfiles @ c8c7a2df1e4bf1b35ef812a8f8dfff16ba38b4dd

System and user configuration, managed by nix and home-manager

darwin: reduce socketfilterfw resource usage

Alin
commit

c8c7a2df1e4bf1b35ef812a8f8dfff16ba38b4dd

parent

746bee77aa9ac9aeae567fd8d7334a2464a60094

1 file changed, 6 insertions(+), 0 deletions(-)

changed files
M system/settings/darwin.nix → system/settings/darwin.nix
@@ -93,6 +93,12 @@ coreutils-prefixed
     iproute2mac
   ];
 
+  networking.applicationFirewall = {
+    enable = true;
+    allowSigned = true;
+    allowSignedApp = false; # stop socketfilterfw issuing >300GiB disk reads over 16h
+  };
+
   services.dnsmasq = {
     enable = true;
     bind = "::1";