feat: hardening nixos desktops (#160)

* feat: hardening nixos desktops

* refactor: move hardening to the root folder

* feat: add nixpaks into nixpkgs via overlays

* feat: nixpak - add netease music

* docs: hardening

* fix: nvidia

* fix: disable apparmor & hardening profile to avoid neovim being killed

* fix: firefox cursor & fonts

outputs/x86_64-linux/src/idols-ai.nix

@@ -19,6 +19,10 @@
       "modules/nixos/desktop.nix"
       # host specific
       "hosts/idols-${name}"
+      # nixos hardening
+      # "hardening/profiles/default.nix"
+      "hardening/nixpaks"
+      # "hardening/apparmor"
     ];
     home-modules = map mylib.relativeToRoot [
       # common