1{
 2  den.aspects.core.harden.misc = {
 3    nixos = {
 4      # Copy from https://wiki.nixos.org/wiki/NixOS_Hardening#Module_blacklist
 5      boot.blacklistedKernelModules = [
 6        # Obscure network protocols
 7        "ax25"
 8        "netrom"
 9        "rose"
10
11        # Old or rare or insufficiently audited filesystems
12        "adfs"
13        "affs"
14        "bfs"
15        "befs"
16        "cramfs"
17        "efs"
18        "erofs"
19        "exofs"
20        "freevxfs"
21        "f2fs"
22        "hfs"
23        "hpfs"
24        "jfs"
25        "minix"
26        "nilfs2"
27        "ntfs"
28        "omfs"
29        "qnx4"
30        "qnx6"
31        "sysv"
32        "ufs"
33      ];
34    };
35  };
36}