main
1{den, ...}: {
2 den.aspects.core.security.includes = [den.aspects.core.security.network];
3 den.aspects.core.security.network = {
4 nixos = {lib, ...}: {
5 boot.kernel.sysctl = {
6 "net.ipv4.conf.all.accept_source_route" = lib.mkDefault "0";
7 "net.ipv4.conf.all.arp_announce" = lib.mkDefault "2";
8 "net.ipv4.conf.all.arp_ignore" = lib.mkDefault "2";
9 "net.ipv4.conf.all.drop_gratuitous_arp" = lib.mkDefault "1";
10 "net.ipv4.conf.all.log_martians" = lib.mkDefault "1";
11 "net.ipv4.conf.all.shared_media" = lib.mkDefault "0";
12 "net.ipv4.conf.default.accept_source_route" = lib.mkDefault "0";
13 "net.ipv4.conf.default.arp_announce" = lib.mkDefault "2";
14 "net.ipv4.conf.default.arp_ignore" = lib.mkDefault "2";
15 "net.ipv4.conf.default.drop_gratuitous_arp" = lib.mkDefault "1";
16 "net.ipv4.conf.default.log_martians" = lib.mkDefault "1";
17 "net.ipv4.conf.default.shared_media" = lib.mkDefault "0";
18 "net.ipv4.tcp_rfc1337" = lib.mkDefault "1";
19 "net.ipv4.tcp_syncookies" = lib.mkDefault "1";
20 "net.ipv6.conf.all.accept_source_route" = lib.mkDefault "0";
21 "net.ipv6.conf.default.accept_source_route" = lib.mkDefault "0";
22 };
23 };
24 };
25}