some security touchups

This commit is contained in:
Reid 2024-08-01 17:15:47 -07:00
parent 5558bf7ee8
commit 4a7d8858e5
Signed by: reidlab
GPG key ID: DAF5EAF6665839FD

View file

@ -59,6 +59,8 @@ in {
# personal computer? no firewall ty :3 # personal computer? no firewall ty :3
networking.firewall.enable = false; networking.firewall.enable = false;
# TODO: usbguard
} // (mkIf cfg.useDoas { } // (mkIf cfg.useDoas {
security.sudo.enable = false; security.sudo.enable = false;
security.doas.enable = true; security.doas.enable = true;