From eb1eedf38ffed3a5446097a87265632cf93f72a1 Mon Sep 17 00:00:00 2001
From: Alejandro Soto <alejandro@34project.org>
Date: Sun, 23 Jun 2024 20:15:26 -0600
Subject: dmz, hv, sys: disable coredumps

---
 sys/default.nix | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

(limited to 'sys/default.nix')

diff --git a/sys/default.nix b/sys/default.nix
index 762abdf..565598c 100644
--- a/sys/default.nix
+++ b/sys/default.nix
@@ -28,10 +28,11 @@ with lib; {
       '';
     };
 
-    # hm-isolation necesita systemd 251
-    systemd = mkIf (config.system.nixos.release == "22.05") {
-      package = pkgs.unstable.systemd;
-    };
+    # Coredumps son un riesgo de seguridad y puden usar mucho disco
+    systemd.coredump.extraConfig = ''
+      Storage=none
+      ProcessSizeMax=0
+    '';
 
     time.timeZone = "America/Costa_Rica";
 
-- 
cgit v1.2.3