nixos-config/system/hardened.nix

19 lines
578 B
Nix

{ config, modulesPath, pkgs, lib, ... }:
{
imports = [ "${modulesPath}/profiles/hardened.nix" ];
# @TODO hardened kernel causes Bluetooth issues
boot.kernelPackages = lib.mkOverride 900 pkgs.linuxPackages;
# Xbox Controller not working via Bluetooth if enabled
security.lockKernelModules = lib.mkOverride 900 false;
boot.loader.systemd-boot.editor = lib.mkDefault false;
# scudo causes Firefox & Tor Browser segfaults
environment.memoryAllocator.provider = lib.mkOverride 900 "libc";
security.allowSimultaneousMultithreading = lib.mkOverride 900 true;
}