some hardening

This commit is contained in:
Henri Dohmen 2025-07-14 16:36:10 +02:00
parent ffe40ca5e7
commit fc85e43c82
4 changed files with 32 additions and 7 deletions

View file

@ -10,10 +10,6 @@
};
};
# otherwise /tmp is on disk. This *may* be problematic as nix
# builds in /tmp but I think my swap is large enough...
tmp.useTmpfs = true;
kernelPackages = pkgs.linuxPackages_6_12;
kernel.sysctl."kernel.sysrq" = 1;