hosts/carotte/security.nix

   1 { inputs, pkgs, lib, config, ... }:
   2 {
   3 security.lockKernelModules = false;
   4 security.virtualisation.flushL1DataCache = lib.mkForce null;
   5 /*
   6 security.gnupg.agent = {
   7   keyring."9AA84E6F6D71F9163C46BF396B141A0806219077" = {};
   8 };
   9 services.openssh.extraConfig = ''
  10   # This is for removing remote gpg-agent's socket
  11   StreamLocalBindUnlink yes
  12 '';
  13 environment.systemPackages = [
  14   pkgs.tshark
  15 ];
  16 */
  17 }