From 52e26582ba3dcedb29cb0cc692b89f48728fc722 Mon Sep 17 00:00:00 2001
From: Jermeiah S <owner@arouzing.xyz>
Date: Sun, 15 Jun 2025 22:53:21 -0400
Subject: [PATCH] added secrity options to default profile

---
 incus/main.tf | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/incus/main.tf b/incus/main.tf
index ff092a9..d561f38 100644
--- a/incus/main.tf
+++ b/incus/main.tf
@@ -5,6 +5,8 @@ resource "incus_profile" "d" {
     "limits.cpu"       = 2
     "security.nesting" = true
     "boot.autostart"   = true
+    "security.privileged" = false
+    "security.syscalls.intercept.mount" = false
   }
 
   # device {