jordan/nix-config
1
1
Fork 0
Code Issues 14 Pull Requests Actions Projects 3 Wiki Activity

Enable audit on server systems only

Browse Source
This commit is contained in:
Jordan Holt 2024-01-20 15:46:15 +00:00
parent 6eb50d3a8f
commit a091fb2a69
Signed by: jordan
GPG Key ID: B8CFFF61F1CCF520
2 changed files with 11 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
hosts/common.nix
View File

@ -18,16 +18,7 @@
console.keyMap = "uk";
security = {
auditd.enable = true;
audit = {
enable = true;
rules = [
"-a exit,always -F arch=b64 -S execve"
];
};
sudo.execWheelOnly = true;
};
security.sudo.execWheelOnly = true;
services.openssh = {
enable = true;

10
hosts/server.nix
View File

@ -7,6 +7,16 @@
documentation.enable = false;
security = {
auditd.enable = true;
audit = {
enable = true;
rules = [
"-a exit,always -F arch=b64 -S execve"
];
};
};
modules.networking.tailscale = {
enable = true;
restrictSSH = false;