From f100962fa31ae33943003f4d8e40393e892bd1a2 Mon Sep 17 00:00:00 2001
From: Natasha Moongrave <natasha@256phi.eu>
Date: Sun, 3 May 2026 21:21:33 +0200
Subject: Switched kronos to the hardened kernel

---
 hosts/kronos/configuration.nix | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

(limited to 'hosts/kronos/configuration.nix')

diff --git a/hosts/kronos/configuration.nix b/hosts/kronos/configuration.nix
index d032921..4e78034 100755
--- a/hosts/kronos/configuration.nix
+++ b/hosts/kronos/configuration.nix
@@ -1,7 +1,15 @@
-{...}: {
+{
+  pkgs,
+  lib,
+  ...
+}: {
   imports = [
     ./hardware-configuration.nix
   ];
 
   networking.hostName = "kronos";
+  boot.kernelPackages = pkgs.linuxPackages_hardened;
+
+  # TODO: Harden the kernel even further (https://wiki.nixos.org/wiki/NixOS_Hardening)
+  # security.lockKernelModules = true;
 }
-- 
cgit v1.2.3