mermet: acme: reenable dnsPropagationCheck, gandi.net fixed the issue

[sourcephile-nix.git] / hosts / losurdo / security.nix

{ ... }:
{
  security.lockKernelModules = false;
  services.openssh.extraConfig = ''
    # This is for removing remote gpg-agent's socket
    StreamLocalBindUnlink yes
  '';
}