security: hardening, new stuff, admin user

2025-12-21 22:24:51 +02:00
parent 2f1fed539e
commit 62c21f09ba
10 changed files with 319 additions and 1519 deletions
@@ -1,6 +1,7 @@
 {
  pkgs,
  # inputs,
+  config,
  lib,
  ...
 }: {
@@ -42,4 +43,5 @@

  # for container in builds support
  nix.settings.system-features = ["uid-range"];
+  systemd.services.nix-daemon.serviceConfig.RestrictNamespaces = lib.mkForce []; # (lib.remove "~cgroup" config.systemd.services.nix-daemon.serviceConfig.RestrictNamespaces);
 }