os/modules/core/default.nix

{ config, lib, ... }:
let
  cfg = config.pub-solar.core;
  psCfg = config.pub-solar;
in
{
  imports = [
    ./boot.nix
    ./hibernation.nix
    ./i18n.nix
    ./networking.nix
    ./packages.nix
  ];

  # Service that makes Out of Memory Killer more effective
  services.earlyoom.enable = true;

  services.logind.lidSwitch = "hibernate";

  services.tor.settings = {
    UseBridges = true;
  };

  # The options below are directly taken from or inspired by
  # https://xeiaso.net/blog/paranoid-nixos-2021-07-18

  # Limit the use of sudo to the group wheel
  security.sudo.execWheelOnly = true;

  # Remove the complete default environment of packages like
  # nano, perl and rsync
  environment.defaultPackages = lib.mkForce [ ];

  # fileSystems."/".options = [ "noexec" ];
}