base: use dbus-broker as dbus implementation

2025-03-15 01:19:33 +01:00
parent ee8965e18c
commit 7b5e114944
2 changed files with 10 additions and 0 deletions
--- a/base/default.nix
+++ b/base/default.nix
@@ -10,6 +10,7 @@

    ./services/acme.nix
    ./services/auto-upgrade.nix
+    ./services/dbus.nix
    ./services/irqbalance.nix
    ./services/logrotate.nix
    ./services/nginx.nix
@@ -48,6 +49,8 @@

  programs.zsh.enable = true;

+  security.lockKernelModules = true;
+  security.protectKernelImage = true;
  security.sudo.execWheelOnly = true;
  security.sudo.extraConfig = ''
    Defaults lecture = never