losurdo: lockKernelModules belongs to security

diff --git a/hosts/losurdo/networking/nftables.nix b/hosts/losurdo/networking/nftables.nix
index 039d69f1c730ac6146f0a698f2d64c20e41a5fd7..a36b467c9818b58f4e4d1613172fb3b7069b705e 100644 (file)
--- a/hosts/losurdo/networking/nftables.nix
+++ b/hosts/losurdo/networking/nftables.nix
@@ -7,7 +7,6 @@ let
 in
 {
 networking.firewall.enable = false;
-security.lockKernelModules = false;
 systemd.services.disable-kernel-module-loading.after = [ "nftables.service" ];
 systemd.services.nftables.serviceConfig.TimeoutStartSec = "20";
 networking.nftables = {

diff --git a/hosts/losurdo/security.nix b/hosts/losurdo/security.nix
index f4e7973c8c1e55f9f4a7b0e818fbfb9cb1baaf13..29134cd7ca9e7ccc7560c915ef78c8d2719bf82e 100644 (file)
--- a/hosts/losurdo/security.nix
+++ b/hosts/losurdo/security.nix
@@ -1,5 +1,6 @@
 { inputs, pkgs, lib, config, ... }:
 {
+security.lockKernelModules = false;
 security.gnupg.agent = {
   keyring."9AA84E6F6D71F9163C46BF396B141A0806219077" = {};
 };