mirror of
https://github.com/foo-dogsquared/nixos-config.git
synced 2025-02-07 18:19:09 +00:00
16 lines
386 B
Nix
16 lines
386 B
Nix
|
# A extended hardened configuration from nixpkgs for desktop and server
|
||
|
|
# systems.
|
||
|
|
{ pkgs, lib, modulesPath, ... }:
|
||
|
|
|
||
|
|
{
|
||
|
|
imports = [
|
||
|
|
"${modulesPath}/profiles/hardened.nix"
|
||
|
|
];
|
||
|
|
|
||
|
|
# Don't replace it mid-way! DON'T TURN LEFT!!!!
|
||
|
|
security.protectKernelImage = true;
|
||
|
|
|
||
|
|
# Disable system console entirely. We don't need it so get rid of it.
|
||
|
|
boot.kernel.sysctl."kernel.sysrq" = 0;
|
||
|
|
}
|