chris/sneeuwvlok
chris/sneeuwvlok
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

wiiiiips

Browse source
This commit is contained in:
Chris Kruining 2026-03-25 16:26:04 +01:00
parent ac3dac322d
commit a7a1763fe0
No known key found for this signature in database
GPG key ID: EB894A3560CCCAD2
105 changed files with 1152 additions and 1093 deletions
Download patch file Download diff file Expand all files Collapse all files

17
modules/nixos/system/security/boot/default.nix
View file

@ -1,13 +1,16 @@
{ config, namespace, inputs, ... }:
let
cfg = config.${namespace}.system.security.boot;
in
{
options.${namespace}.system.security.boot = {};
config,
namespace,
inputs,
...
}: let
cfg = config.sneeuwvlok.system.security.boot;
in {
options.sneeuwvlok.system.security.boot = {};
config = {
boot = {
kernelModules = [ "tcp_bbr" ];
kernelModules = ["tcp_bbr"];
kernel.sysctl = {
## TCP hardening
# Prevent bogus ICMP errors from filling up logs.
@ -43,4 +46,4 @@ in
};
};
};
}
}