nixos-system-config/modules/system/security.nix

{ ... }:

{
  security.sudo.extraConfig = ''
    Defaults  lecture="never"
  '';

  security.apparmor = {
    enable = true;
  };

  nixpkgs.config.permittedInsecurePackages = [
    "jitsi-meet-1.0.8043"
  ];
}
Add some security enhancements at the cost of perf Currently experimenting with whether or not it's worth running ClamAV. Realistically speaking, I probably don't need it, all my executables are sourced from nixpkgs and should be malware free. I don't even know if it scans the store or anything. I'm just going to leave it here and forget about it and maybe sometime in the future it saves me from something idk. 2024-07-09 14:01:37 +02:00			`{ ... }:`

			`{`
Move sudo configuration to security 2024-07-25 21:54:13 +02:00			`security.sudo.extraConfig = ''`
			`Defaults lecture="never"`
			`'';`

Add some security enhancements at the cost of perf Currently experimenting with whether or not it's worth running ClamAV. Realistically speaking, I probably don't need it, all my executables are sourced from nixpkgs and should be malware free. I don't even know if it scans the store or anything. I'm just going to leave it here and forget about it and maybe sometime in the future it saves me from something idk. 2024-07-09 14:01:37 +02:00			`security.apparmor = {`
			`enable = true;`
			`};`
security: Allow jitsi-meet libolm, which jitsi-meet depends on was recently deprecated. This does not affect me as I don't use jitsi-meet directly. It's installed as a dependency of another package for a feature which I do not use. I honestly didn't even know any of my packages depended on jitsi-meet until now. I'll leave this here until the issue is resolved. 2024-08-19 22:25:38 +02:00
			`nixpkgs.config.permittedInsecurePackages = [`
			`"jitsi-meet-1.0.8043"`
			`];`
Add some security enhancements at the cost of perf Currently experimenting with whether or not it's worth running ClamAV. Realistically speaking, I probably don't need it, all my executables are sourced from nixpkgs and should be malware free. I don't even know if it scans the store or anything. I'm just going to leave it here and forget about it and maybe sometime in the future it saves me from something idk. 2024-07-09 14:01:37 +02:00			`}`