atridad/lavitz
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

1766193006

Browse Source
This commit is contained in:
Atridad Lahiji
2025-12-19 18:10:06 -07:00
parent b4d6e94434
commit 20fefd7813
2 changed files with 2 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
modules/security.nix
View File

@@ -2,14 +2,11 @@
{ {
security.sudo.execWheelOnly = true; security.sudo.execWheelOnly = true;
nix.settings.allowed-users = [ "@wheel" ]; nix.settings.allowed-users = [ "@wheel" ];
security.apparmor.enable = true; security.apparmor.enable = true;
security.audit.enable = true;
security.auditd.enable = true;
services.fail2ban.enable = true; services.fail2ban.enable = true;
boot.kernel.sysctl = { boot.kernel.sysctl = {

8
modules/services.nix
View File

@@ -28,13 +28,7 @@
enable = true; enable = true;
autoStart = true; autoStart = true;
openFirewall = true; openFirewall = true;
}; capSysAdmin = true;
security.wrappers.sunshine = {
owner = "root";
group = "root";
capabilities = "cap_sys_admin+p";
source = "${pkgs.sunshine}/bin/sunshine";
}; };
services.avahi.publish.enable = true; services.avahi.publish.enable = true;