diff options
| author | adikro <adikro@disroot.org> | 2026-05-18 15:25:50 +0200 |
|---|---|---|
| committer | adikro <adikro@disroot.org> | 2026-05-18 15:25:50 +0200 |
| commit | c6b6a3e6c702834eac2b633db2ed4c397b4ae113 (patch) | |
| tree | 4ec03c63fac3c7d0e7caea31cbe9ec1317df8c2f /os/core | |
| parent | 62b7ca3cdfff5182daad7f4092b6861bbc93f04c (diff) | |
set up disko, zfs, clamav aide, backup, nfs, zfs for oci and ups
Diffstat (limited to 'os/core')
| -rw-r--r-- | os/core/drivers.nix | 4 | ||||
| -rw-r--r-- | os/core/security.nix | 21 |
2 files changed, 2 insertions, 23 deletions
diff --git a/os/core/drivers.nix b/os/core/drivers.nix index ca5ecc4..d6b2cec 100644 --- a/os/core/drivers.nix +++ b/os/core/drivers.nix @@ -39,8 +39,8 @@ in kernel = lib.mkOption { type = lib.types.enum [ "stable" - "unstable" "zen" + "zfs" "hardened" ]; default = "stable"; @@ -107,7 +107,7 @@ in "stable" = pkgs.linuxPackages_latest; "zen" = pkgs.linuxPackages_zen; "hardened" = pkgs.linuxPackages_hardened; - # "unstable" = pkgs.linuxPackages.; + "zfs" = config.boot.zfs.package.latestCompatibleLinuxPackages; }; in kernels.${cfg.kernel} or kernels."stable"; diff --git a/os/core/security.nix b/os/core/security.nix index c401a14..f69ab1f 100644 --- a/os/core/security.nix +++ b/os/core/security.nix @@ -58,27 +58,6 @@ in apparmor-bin-utils ]; }) - (lib.mkIf cfg.antivirus.enable { - services.clamav = { - daemon = { - enable = true; - settings = { - OnAccessIncludePath = [ "/home/${username}" ]; - OnAccessPrevention = true; - OnAccessExcludeUname = "clamav"; - MaxThreads = 20; - MaxQueue = 100; - }; - }; - scanner.enable = true; - updater.enable = true; - fangfrisch.enable = true; - # massive performance hit - # clamonacc.enable = true; - }; - boot.kernel.sysctl."fs.inotify.max_user_watches" = 524288; - users.users.${username}.extraGroups = [ "clamav" ]; - }) { services.gnome.gnome-keyring.enable = true; |
