dmz, hv, sys: disable coredumps

1 files changed, 5 insertions, 4 deletions

diff --git a/sys/default.nix b/sys/default.nix
index 762abdf..565598c 100644
--- a/sys/default.nix
+++ b/sys/default.nix
@@ -28,10 +28,11 @@ with lib; {
       '';
     };
 
-    # hm-isolation necesita systemd 251
-    systemd = mkIf (config.system.nixos.release == "22.05") {
-      package = pkgs.unstable.systemd;
-    };
+    # Coredumps son un riesgo de seguridad y puden usar mucho disco
+    systemd.coredump.extraConfig = ''
+      Storage=none
+      ProcessSizeMax=0
+    '';
 
     time.timeZone = "America/Costa_Rica";