diff options
| author | Fuwn <[email protected]> | 2024-10-01 06:02:50 -0700 |
|---|---|---|
| committer | Fuwn <[email protected]> | 2024-10-01 06:02:50 -0700 |
| commit | fcddd3ba06088e235243d41395e40fd9e0107a76 (patch) | |
| tree | 8b4fabd85315ec93a09842a2123a2e6e16583c75 /modules/pc/security/default.nix | |
| parent | modules: move shared i18n to pc (diff) | |
| download | nixos-config-fcddd3ba06088e235243d41395e40fd9e0107a76.tar.xz nixos-config-fcddd3ba06088e235243d41395e40fd9e0107a76.zip | |
modules: move shared pc modules from desktop to pc
Diffstat (limited to 'modules/pc/security/default.nix')
| -rw-r--r-- | modules/pc/security/default.nix | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/modules/pc/security/default.nix b/modules/pc/security/default.nix new file mode 100644 index 0000000..c1c084c --- /dev/null +++ b/modules/pc/security/default.nix @@ -0,0 +1,19 @@ +{ config, lib, ... }: +{ + imports = [ + ./apparmor.nix + ./audit.nix + ./doas.nix + ./kernel.nix + ./pam.nix + ./polkit.nix + ./sudo.nix + ]; + + security = { + rtkit.enable = lib.modules.mkForce config.services.pipewire.enable; + virtualisation.flushL1DataCache = "always"; + }; + + programs.firejail.enable = true; +} |