33
How do you guys harden your systems or make them more privacy oriented? (lemmy.dbzer0.com)
submitted 3 days ago by to c/nix@programming.dev
8 comments fedilink hide all child comments
 

The responses don't have to be strictly NixOS or Linux specific as I expect the general process to be very similar.

I never hardened a system before so I'm not sure what things I should be focusing on and what solutions are out there. I'm hearing a lot good on SELinux and apparmour but but those sadly aren't supported on NixOS. Recently I set up adguard home with somewhat strict blocklists and SearxNG to take control over my web searches. In the coming days I intend to set up wireguard and a VPN in my config and I also have some firefox extensions for blocking ads, trackers, JS, port scanning, etc. but it all feels surface level and I don't know where to take things from there. What are you guys doing with your setups?

Usually I prefer to never ask questions and look things up myself but reddit will soon block everything with a login wall and that's where I get most info from so I'm finally giving it a shot. :p

you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 3 days ago

https://github.com/nix-community/impermanence

Your root directory is mounted as a tmpfs which means it gets cleared every startup. The only way to persist config or data is to have it in your Nix config or use impermanence to bind mount a folder to a persisted directly.

I use it on my servers. I have Impermanence + LUKS with remote unlocking on my servers

  • permalink
  • fedilink
  • source
  • parent