kyra(hardening): journalctl audit settings

Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
This commit is contained in:
s0me1newithhand7s 2026-05-03 19:05:41 +03:00
parent d5d41960f4
commit ceb94d7cb1

View file

@ -0,0 +1,14 @@
_: {
services = {
journald = {
audit = true;
storage = "volatile";
rateLimitBurst = 1000;
rateLimitInterval = "30s";
extraConfig = ''
RuntimeMaxUse=128M
MaxRetentionSec=1day
'';
};
};
}