mikael/idiosyn
mikael/idiosyn
1
1
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

nixos/headless: Only disable module loading if supported

Browse source
This commit is contained in:
Mikael Voss 2024-10-11 00:43:37 +02:00
parent dc1de1a343
commit e7b2d8b59a
No known key found for this signature in database
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
nixos/module/headless.nix
View file

@ -13,7 +13,7 @@
hardware.graphics.enable = false;
security.lockKernelModules = true;
security.lockKernelModules = lib.mkIf (config.boot.kernelPackages.kernel.config.isEnabled "MODULES") true;
security.protectKernelImage = true;
services.openssh.enable = true;
services.openssh.openFirewall = true;