mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-03-23 01:49:56 +01:00
df9ca7aefa
* feat: hardening nixos desktops * refactor: move hardening to the root folder * feat: add nixpaks into nixpkgs via overlays * feat: nixpak - add netease music * docs: hardening * fix: nvidia * fix: disable apparmor & hardening profile to avoid neovim being killed * fix: firefox cursor & fonts
10 lines
230 B
Nix
10 lines
230 B
Nix
{modulesPath, ...}: {
|
|
imports = [
|
|
(modulesPath + "/profiles/hardened.nix")
|
|
];
|
|
|
|
# disable coredump that could be exploited later
|
|
# and also slow down the system when something crash
|
|
systemd.coredump.enable = false;
|
|
}
|