caem/nixos-system-config
caem/nixos-system-config
1
Fork 0
Code Releases Activity

Add some security enhancements at the cost of perf

Browse source 
Currently experimenting with whether or not it's worth running ClamAV.
Realistically speaking, I probably don't need it, all my executables are
sourced from nixpkgs and should be malware free. I don't even know if it
scans the store or anything. I'm just going to leave it here and forget
about it and maybe sometime in the future it saves me from something idk.
This commit is contained in:
caem 2024-07-09 14:01:37 +02:00
parent d5adae15f6
commit f217128dcc
Signed by: caem
GPG key ID: 69A830D03203405F
1 changed files with 15 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
packages/sets/security.nix Normal file
View file

@ -0,0 +1,15 @@
{ ... }:
{
services.clamav = {
scanner.enable = true;
daemon.enable = true;
fangfrisch.enable = true;
updater.enable = true;
};
security.apparmor = {
enable = true;
};
}