hosts/carotte/security.nix

   1 { inputs, pkgs, lib, config, ... }:
   2 {
   3 security.lockKernelModules = false;
   4 security.virtualisation.flushL1DataCache = lib.mkForce null;
   5 security.gnupg.agent = {
   6   keyring."00B1DD47EA6B7BEF92FFEA66922C6249D6336C94" = {};
   7 };
   8 services.openssh.extraConfig = ''
   9   # This is for removing remote gpg-agent's socket
  10   StreamLocalBindUnlink yes
  11 '';
  12 /*
  13 environment.systemPackages = [
  14   pkgs.tshark
  15 ];
  16 */
  17 }