aaron/nixconfig

fix: do not allow edits to the bootloader #92

Merged

aaron merged 1 commits from feature/bootloader_security into main

2026-10-03 14:11:56 +02:00

1 changed files with 2 additions and 0 deletions

									
										modules/nixos/bootloader.nix
									
		+2
		
												View File
												
					@@ -4,6 +4,8 @@

					  # set bootloader to systemd

					  # set bootloader to systemd

					  boot.loader = {

					  boot.loader = {

					    systemd-boot.enable = true;

					    systemd-boot.enable = true;

					    # no kernel command line editing at the boot menu (e.g. init=/bin/sh)

					    systemd-boot.editor = false;

					    efi.canTouchEfiVariables = true;

					    efi.canTouchEfiVariables = true;

					  };

					  };