hosts/kronos/configuration.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

{
  pkgs,
  lib,
  ...
}: {
  imports = [
    ./hardware-configuration.nix
  ];

  networking.hostName = "kronos";
  boot.kernelPackages = pkgs.linuxPackages_hardened;

  services.illum.enable = false; # Disable illum because I've never noticed it working and it crashes on hardened kernel

  # TODO: Harden the kernel even further (https://wiki.nixos.org/wiki/NixOS_Hardening)
  # security.lockKernelModules = true;
}