@zer0unplanned This post looks very useful. I made a similar tool (still in beta with errors) to grab screenshots and raw data of manual pages #manpages for #linux commands, in this case #ssh info, and to present the different layers that are the OS, app and nixos settings. The program ssh-key-manager is in my flake https://repoducible.org ( features/security/packages #flake #part can be pulled out into another flake) & bit of a monster. Yours looks ultra compact #nixos
#flakepart #flakeparts
@whoami Thank you for posting this talk about #hardening. Inspired me to take a look at #services on my various #nixos computers. Made a #dashboard detect where there might be room for improvement in hardening settings for #systemd #services. The dashboard is a #flakepart , info here https://codeberg.org/adingbatponder/reticulum_nixos_flake/src/branch/main/features/monitoring/SECURITY_MONITORING_README.md The flake part can be pulled into a flake alone, without the rest of the flake components, see https://codeberg.org/adingbatponder/reticulum_nixos_flake/src/branch/main/features/monitoring/Beginner_friendly_guide_to_incoroporating_monitoring_into_your_flake.md. The dashboard can help audit the settings & improve the hardening.