chris/sneeuwvlok
chris/sneeuwvlok
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

.

Browse source
This commit is contained in:
Chris Kruining 2024-07-23 18:40:04 +02:00
parent 6eade157b3
commit 7e402167b4
8 changed files with 32 additions and 46 deletions
Download patch file Download diff file Expand all files Collapse all files

4
modules/system/security.nix
View file

@ -24,8 +24,8 @@
configurationLimit = 50;
};
kernalModules = [ "tcp_bbr" ];
kernal.sysctl = {
kernelModules = [ "tcp_bbr" ];
kernel.sysctl = {
## TCP hardening
# Prevent bogus ICMP errors from filling up logs.
"net.ipv4.icmp_ignore_bogus_error_responses" = 1;