nix: Load common security settings

flake.nix

@@ -15,6 +15,7 @@
       system = "x86_64-linux";
       modules = [
         inputs.snm.nixosModule
+	./modules/security.nix
 	./hosts/thrall
       ];
     };

modules/security.nix

@@ -9,7 +9,7 @@
 
   # tmpfs = /tmp is mounted in ram. Doing so makes temp file management speedy
   # on ssd systems, and volatile! Because it's wiped on reboot.
-  boot.tmpOnTmpfs = lib.mkDefault true;
+#  boot.tmpOnTmpfs = lib.mkDefault true;
   # If not using tmpfs, which is naturally purged on reboot, we must clean it
   # /tmp ourselves. /tmp should be volatile storage!
   boot.cleanTmpDir = lib.mkDefault (!config.boot.tmpOnTmpfs);