nixcfg/modules/nixos
Harald Hoyer b9cfdc99a7 feat(base): blacklist unused network kernel modules
Disable rxrpc, kafs, af_key, esp4, esp6 across all systems that enable
metacfg.base. None of them are used on these hosts, and they have a
history of CVEs — blacklisting reduces kernel attack surface.
2026-05-13 09:16:21 +02:00
..
hardware/wooting refactor(nix): extract common system configs into reusable modules 2026-01-30 10:42:09 +01:00
home nix fmt 2024-11-19 10:31:29 +01:00
nix chore: statix fix 2026-04-20 10:09:24 +02:00
nix-ld feat(nix-ld): add libgbm 2025-12-15 12:00:38 +01:00
services feat(base): blacklist unused network kernel modules 2026-05-13 09:16:21 +02:00
sgx nix fmt 2024-11-19 10:31:29 +01:00
system nix fmt 2026-02-24 13:25:42 +01:00
tools chore: statix fix 2026-04-20 10:09:24 +02:00
user chore: statix fix 2026-04-20 10:09:24 +02:00