some updates

common/nixos/logrotate.nix

@@ -5,9 +5,14 @@
 
   services.logrotate = {
     settings = {
+      header = {
+        dateext = true;
+      };
+
       "var/log/audit/audit.log" = {
         frequency = "daily";
         rotate = 3;
+        size = "100k";
       };
     };
   };

common/nixos/ssh/default.nix

@@ -1,5 +1,10 @@
-{lib, ...}: {
-  imports = [./ssh.nix ./ssh_client.nix ./ssh_guard.nix];
+{ lib, ... }:
+{
+  imports = [
+    ./ssh.nix
+    ./ssh_client.nix
+    ./ssh_guard.nix
+  ];
 
   ssh_client.enable = lib.mkDefault true;
   ssh.enable = lib.mkDefault false;

common/nixos/sysctl/kernel.nix

@@ -31,7 +31,8 @@
     #   - 2: only admins can use ptrace (CAP_SYS_PTRACE capability required)
     #   - 3: disables ptrace completely, reboot is required to re-enable ptrace
     # If you need ptrace to work, then avoid non-ancestor ptrace access to running processes and their credentials, and use value "1".
-    "kernel.yama.ptrace_scope" = 3;
+    # # breaks debuggers
+    # "kernel.yama.ptrace_scope" = 3;
 
     # restrict kernel logs to root only
     "kernel.dmesg_restrict" = 1;