diff --git a/flake.nix b/flake.nix index e1baf9a..f81c0f9 100644 --- a/flake.nix +++ b/flake.nix @@ -15,6 +15,7 @@ system = "x86_64-linux"; modules = [ inputs.snm.nixosModule + ./modules/security.nix ./hosts/thrall ]; }; diff --git a/modules/security.nix b/modules/security.nix index cdcc85d..3482c16 100644 --- a/modules/security.nix +++ b/modules/security.nix @@ -9,7 +9,7 @@ # tmpfs = /tmp is mounted in ram. Doing so makes temp file management speedy # on ssd systems, and volatile! Because it's wiped on reboot. - boot.tmpOnTmpfs = lib.mkDefault true; +# boot.tmpOnTmpfs = lib.mkDefault true; # If not using tmpfs, which is naturally purged on reboot, we must clean it # /tmp ourselves. /tmp should be volatile storage! boot.cleanTmpDir = lib.mkDefault (!config.boot.tmpOnTmpfs);