dots/hosts/orion/modules/security.nix
Price Hiller 84a40a7bf0
Some checks failed
Check Formatting of Files / Check-Formatting (push) Failing after 35s
refactor(hosts/orion): disable auditd
2025-01-02 11:49:32 -06:00

16 lines
360 B
Nix

{ ... }:
{
security = {
polkit = {
enable = true;
};
sudo.execWheelOnly = true;
};
boot.kernel.sysctl = {
"net.ipv4.conf.all.log_martions" = true;
"net.ipv4.conf.all.rp_filter" = 1;
"net.ipv4.conf.default.log_martions" = true;
"net.ipv4.conf.default.rp_filter" = 1;
"net.ipv4.icmp_echo_ignore_broadcasts" = 1;
};
}