Switched kronos to the hardened kernel

1 files changed, 9 insertions, 1 deletions

diff --git a/hosts/kronos/configuration.nix b/hosts/kronos/configuration.nix
index d032921..4e78034 100755
--- a/hosts/kronos/configuration.nix
+++ b/hosts/kronos/configuration.nix
@@ -1,7 +1,15 @@
-{...}: {
+{
+  pkgs,
+  lib,
+  ...
+}: {
   imports = [
     ./hardware-configuration.nix
   ];
 
   networking.hostName = "kronos";
+  boot.kernelPackages = pkgs.linuxPackages_hardened;
+
+  # TODO: Harden the kernel even further (https://wiki.nixos.org/wiki/NixOS_Hardening)
+  # security.lockKernelModules = true;
 }