carotte: apply git-crypt

[sourcephile-nix.git] / hosts / losurdo / security.nix

{ ... }:
{
  security.lockKernelModules = false;
  services.openssh.extraConfig = ''
    # This is for removing remote gpg-agent's socket
    StreamLocalBindUnlink yes
  '';
}