kyra(hardening): journalctl audit settings
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
This commit is contained in:
parent
d5d41960f4
commit
ceb94d7cb1
1 changed files with 14 additions and 0 deletions
14
kyra/services/journalctl.nix
Normal file
14
kyra/services/journalctl.nix
Normal file
|
|
@ -0,0 +1,14 @@
|
||||||
|
_: {
|
||||||
|
services = {
|
||||||
|
journald = {
|
||||||
|
audit = true;
|
||||||
|
storage = "volatile";
|
||||||
|
rateLimitBurst = 1000;
|
||||||
|
rateLimitInterval = "30s";
|
||||||
|
extraConfig = ''
|
||||||
|
RuntimeMaxUse=128M
|
||||||
|
MaxRetentionSec=1day
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
};
|
||||||
|
}
|
||||||
Loading…
Add table
Add a link
Reference in a new issue