gwg313/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: add ssh guard

Browse source
This commit is contained in:
gwg313 2024-02-04 12:52:53 -05:00
parent 1b98ea698d
commit d655186dc0
Signed by: gwg313
GPG key ID: 60FF63B4826B7400
5 changed files with 30 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
hosts/candlekeep/sysctl.nix Normal file
View file

@ -0,0 +1,7 @@
{lib, ...}: {
boot.kernel.sysctl = {
# disable unprivileged user namespaces to decrease attack surface
# Enabled because breaks discord/element etc
"kernel.unprivileged_userns_clone" = lib.mkForce 1;
};
}