From c8e0b67ed4872dc2a0eb8bc10d33584a84091c87 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Felix=20Schr=C3=B6ter?= <dev@felschr.com>
Date: Tue, 23 Sep 2025 21:27:15 +0200
Subject: [PATCH] feat(system): disable apparmor in hardened config

Caused some problems with passing secrets to miniflux that I could not
resolve. And there are very few apparmor profiles available anyway.
---
 system/hardened.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/system/hardened.nix b/system/hardened.nix
index 5bc2b25..2795fdf 100644
--- a/system/hardened.nix
+++ b/system/hardened.nix
@@ -13,6 +13,7 @@
   boot.kernelPackages = lib.mkOverride 900 pkgs.linuxPackages;
 
   security = {
+    apparmor.enable = lib.mkOverride 900 false;
     # Xbox Controller not working via Bluetooth if enabled
     lockKernelModules = lib.mkOverride 900 false;