summaryrefslogtreecommitdiffstats
path: root/nixos/modules/security/systemd-confinement.nix
diff options
context:
space:
mode:
Diffstat (limited to 'nixos/modules/security/systemd-confinement.nix')
-rw-r--r--nixos/modules/security/systemd-confinement.nix11
1 files changed, 6 insertions, 5 deletions
diff --git a/nixos/modules/security/systemd-confinement.nix b/nixos/modules/security/systemd-confinement.nix
index f3a2de3bf87a..07b725effb7d 100644
--- a/nixos/modules/security/systemd-confinement.nix
+++ b/nixos/modules/security/systemd-confinement.nix
@@ -22,16 +22,17 @@ in {
options.confinement.fullUnit = lib.mkOption {
type = types.bool;
default = false;
- description = ''
+ description = lib.mdDoc ''
Whether to include the full closure of the systemd unit file into the
chroot, instead of just the dependencies for the executables.
- <warning><para>While it may be tempting to just enable this option to
+ ::: {.warning}
+ While it may be tempting to just enable this option to
make things work quickly, please be aware that this might add paths
to the closure of the chroot that you didn't anticipate. It's better
- to use <option>confinement.packages</option> to <emphasis
- role="strong">explicitly</emphasis> add additional store paths to the
- chroot.</para></warning>
+ to use {option}`confinement.packages` to **explicitly** add additional store paths to the
+ chroot.
+ :::
'';
};