From 9531a2efdd319719b606b39216e0ffec2d2239eb Mon Sep 17 00:00:00 2001 From: naturallaw777 <1+naturallaw777@noreply.git.sovransystems.com> Date: Sat, 23 May 2026 15:33:42 -0500 Subject: [PATCH] Update README.md --- README.md | 4 ---- 1 file changed, 4 deletions(-) diff --git a/README.md b/README.md index 316f292..b0dca3d 100644 --- a/README.md +++ b/README.md @@ -130,10 +130,6 @@ Facts about the defaults, straight from `configuration.nix` and the modules: - **Firewall on, public sshd off, RDP off, auto-login off.** - **EFI** is mounted with `umask=0077`. - **Kernel surface trimmed.** `boot.blacklistedKernelModules = [ "rxrpc" ];` -- **Emergency mode disabled** (`systemd.enableEmergencyMode = false`). -- **GNOME Keyring** wired into PAM (`gdm-password`, `gdm-autologin`); the keyring file is declaratively created with `0600` perms via `systemd.tmpfiles`. -- **PostgreSQL** is local-only (`local trust`, `127.0.0.1/32 trust`, `::1/128 trust`). Not exposed to the network. -- **Secrets** are materialized through `modules/credentials.nix` and `nix-bitcoin-secrets` (`/etc/nix-bitcoin-secrets/`, included in backups). - **Weekly garbage collection** with `--delete-older-than 7d`. ## Backups & Recovery