1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
{ pkgs, lib, ... }: { imports = [ ./hardware-configuration.nix ]; networking.hostName = "kronos"; boot.kernelPackages = pkgs.linuxPackages_hardened; # TODO: Harden the kernel even further (https://wiki.nixos.org/wiki/NixOS_Hardening) # security.lockKernelModules = true; }