security: no longer depend upon upstream's hardening

[sourcephile-nix.git] / machines / mermet / security.nix

{ inputs, pkgs, lib, config, ... }:
{
services.openssh.extraConfig = ''
  # This is for removing remote gpg-agent's socket
  StreamLocalBindUnlink yes
'';
}