initial commit
This commit is contained in:
commit
9a935f8431
27 changed files with 1309 additions and 0 deletions
10
modules/programs/harden.nix
Normal file
10
modules/programs/harden.nix
Normal file
|
@ -0,0 +1,10 @@
|
|||
{ config, user, sensitive, lib, ... }: {
|
||||
networking.firewall.enable = true;
|
||||
|
||||
# security.sudo.execWheelOnly = true;
|
||||
# security.auditd.enable = true;
|
||||
# security.audit.enable = !config.boot.isContainer;
|
||||
|
||||
# PGP set up.
|
||||
programs.gnupg.agent.enable = true;
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue