mirror of
https://github.com/foo-dogsquared/nixos-config.git
synced 2025-02-13 12:19:00 +00:00
14 lines
380 B
Nix
14 lines
380 B
Nix
# A extended hardened configuration from nixpkgs for desktop and server
|
|
# systems.
|
|
{ pkgs, lib, modulesPath, ... }:
|
|
|
|
{
|
|
imports = [ "${modulesPath}/profiles/hardened.nix" ];
|
|
|
|
# Don't replace it mid-way! DON'T TURN LEFT!!!!
|
|
security.protectKernelImage = true;
|
|
|
|
# Disable system console entirely. We don't need it so get rid of it.
|
|
boot.kernel.sysctl."kernel.sysrq" = 0;
|
|
}
|