nix: revamp secrets

[sourcephile-nix.git] / hosts / losurdo / security.nix

{ inputs, pkgs, lib, config, ... }:
{
security.lockKernelModules = false;
services.openssh.extraConfig = ''
  # This is for removing remote gpg-agent's socket
  StreamLocalBindUnlink yes
'';
}