Hardening: Vulnix + kernel hardening

Signed-off-by: Hadi <hadi@example.fr>

hosts/laptop/configuration.nix

@@ -14,6 +14,7 @@
     ../../nixos/utils.nix
     ../../nixos/hyprland.nix
     ../../nixos/steam.nix
+    ../../nixos/kernel-hardening.nix
     ../../home/programs/gui/helium/system.nix # I hate browser's configuration..
 
     # CHANGEME: You should probably remove those things:

hosts/laptop/persistence.nix

@@ -13,6 +13,7 @@
       "/var/lib/systemd/timers" # last-run timestamps (e.g. nix gc weekly)
       "/var/log"
       "/var/cache/tuigreet"
+      "/var/cache/vulnix"
       "/var/db/sudo/lectured" # remembers that the sudo lecture was already shown
     ];
 

hosts/server/configuration.nix

@@ -19,7 +19,7 @@
     ../../server-modules/bentopdf.nix
     ../../server-modules/cyberchef.nix
     ../../server-modules/mazanoke.nix
-    ../../server-modules/kernel-hardening.nix
+    ../../nixos/kernel-hardening.nix
     ../../server-modules/fail2ban.nix
     ../../server-modules/default-creds.nix
     ../../server-modules/gitea.nix

hosts/work/configuration.nix

@@ -11,6 +11,8 @@
     ../../nixos/users.nix
     ../../nixos/utils.nix
     ../../nixos/hyprland.nix
+    ../../nixos/kernel-hardening.nix
+    ../../nixos/vulnix.nix
     ../../home/programs/gui/helium/system.nix # I hate browser's configuration..
 
     # CHANGEME: You should probably remove those things:

hosts/work/persistence.nix

@@ -13,6 +13,7 @@
       "/var/lib/systemd/timers" # last-run timestamps (e.g. nix gc weekly)
       "/var/log"
       "/var/cache/tuigreet"
+      "/var/cache/vulnix"
       "/var/db/sudo/lectured" # remembers that the sudo lecture was already shown
     ];