asxpi/nixOS
asxpi/nixOS
1
0
Fork 0
Code Issues Pull requests Activity

podman, opensnitch

Browse source
This commit is contained in:
Sergei Poljanski 2026-01-13 18:10:28 +02:00
commit 654c8a8b72
Signed by: asxpi
GPG key ID: 4F8851660FA4121B
6 changed files with 20 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

5
modules/security.nix
View file

@ -49,6 +49,9 @@
implicitPolicyTarget = "block";
};
# OpenSnitch Application Firewall
services.opensnitch.enable = true;
security.pam.loginLimits = [
{ domain = "*"; item = "core"; type = "-"; value = "0"; }
];
@ -84,5 +87,7 @@
lynis
audit
tcpdump
bandwhich
opensnitch-ui
];
}