issues
search
cynicsketch
/
nix-mineral
Conveniently and reasonably harden NixOS.
MIT License
64
stars
3
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Rework use of `nm-overrides.nix`
#32
cynicsketch
opened
14 hours ago
0
Split defaults
#31
cynicsketch
opened
14 hours ago
0
Use mkRenamedOptionModule for renamed options
#30
cynicsketch
opened
14 hours ago
0
Set mkDefault explcitly
#29
cynicsketch
opened
14 hours ago
0
systemd.tmpfiles.settings."restricthome" makes system take <14 minutes to start
#28
Peledron
opened
1 week ago
2
Fix issue with gitconfig
#27
Pandapip1
closed
1 week ago
1
Suggestion, Use nvfetcher instead of current sources.toml
#26
wyyllou
opened
3 weeks ago
2
Document miscellaneous things, sysctl, boot parameters...
#25
cynicsketch
opened
1 month ago
0
Wip 1 reformat nix mineral nix changes
#24
wyyllou
closed
1 month ago
1
Add SSH hardening
#23
dr460nf1r3
opened
1 month ago
2
Manually add other CPU mitigation boot parameters
#22
cynicsketch
opened
1 month ago
0
Don't disable secure redirects
#21
cynicsketch
opened
1 month ago
0
"proc: Bad value for 'gid'"
#20
Laski
closed
3 weeks ago
5
Initial structuring for merging nm-overrides with nix-mineral.nix
#19
cynicsketch
closed
2 days ago
11
General Readme clarification improvements and a new automatic installation (without flakes) section
#18
wyyllou
closed
1 month ago
2
Consider adding additional configuration utilising nixpkgs security/misc.nix module
#17
wyyllou
closed
1 month ago
5
fetch kicksecure upstream implementation with external sources.toml
#16
wyyllou
closed
1 month ago
2
Harden systemd services
#15
wyyllou
opened
1 month ago
6
Refactoring and formatting
#14
wyyllou
closed
1 month ago
4
A possible implementation of fetching the Kicksecure configs from upstream
#13
wyyllou
closed
1 month ago
9
reformat nix-mineral.nix
#12
wyyllou
closed
1 month ago
1
filesystems."/boot" causing error in certain EFI partition configurations
#11
wyyllou
opened
1 month ago
3
Add flake-specific instructions to readme
#10
wyyllou
closed
1 month ago
2
Use impermanence
#9
cynicsketch
opened
1 month ago
3
Use apparmor.d
#8
cynicsketch
opened
1 month ago
4
Automatically pull configuration from Kicksecure/other borrowed configurations
#7
cynicsketch
closed
1 month ago
0
Cherry pick from KSPP
#6
cynicsketch
opened
1 month ago
0
Potentially enable slub_debug(?)
#5
cynicsketch
opened
1 month ago
2
Cherry pick from Kicksecure security-misc
#4
cynicsketch
opened
1 month ago
2
Cherry pick from k4yt3x's sysctl config
#3
cynicsketch
closed
1 month ago
1
Make an "install script"
#2
cynicsketch
closed
1 month ago
3
Reformat nix-mineral.nix
#1
cynicsketch
opened
1 month ago
10