nixos-config/system/hardened.nix

25 lines
588 B
Nix

{
config,
modulesPath,
pkgs,
lib,
...
}:
{
imports = [ "${modulesPath}/profiles/hardened.nix" ];
# @TODO hardened kernel causes Bluetooth issues
boot.kernelPackages = lib.mkOverride 900 pkgs.linuxPackages;
# Xbox Controller not working via Bluetooth if enabled
security.lockKernelModules = lib.mkOverride 900 false;
boot.loader.systemd-boot.editor = lib.mkDefault false;
# scudo causes Firefox & Tor Browser segfaults
environment.memoryAllocator.provider = lib.mkOverride 900 "libc";
security.allowSimultaneousMultithreading = lib.mkOverride 900 true;
}