caem/nixos-system-config
caem/nixos-system-config
1
Fork 0
Code Releases Activity
nixos-system-config/modules/system/security.nix

20 lines
271 B
Nix
Raw Normal View History

Add some security enhancements at the cost of perf Currently experimenting with whether or not it's worth running ClamAV. Realistically speaking, I probably don't need it, all my executables are sourced from nixpkgs and should be malware free. I don't even know if it scans the store or anything. I'm just going to leave it here and forget about it and maybe sometime in the future it saves me from something idk.
2024-07-09 14:01:37 +02:00
{ ... }:
{
Move sudo configuration to security
2024-07-25 21:54:13 +02:00
security.sudo.extraConfig = ''
Defaults lecture="never"
'';
Add back clamav as it has now been fixed in nixpkgs#326533
2024-07-21 16:43:27 +02:00
services.clamav = {
scanner.enable = true;
daemon.enable = true;
fangfrisch.enable = true;
updater.enable = true;
};
Add some security enhancements at the cost of perf Currently experimenting with whether or not it's worth running ClamAV. Realistically speaking, I probably don't need it, all my executables are sourced from nixpkgs and should be malware free. I don't even know if it scans the store or anything. I'm just going to leave it here and forget about it and maybe sometime in the future it saves me from something idk.
2024-07-09 14:01:37 +02:00
security.apparmor = {
enable = true;
};
}
Copy permalink