nixos/config/security.nix

{ config, lib, pkgs, ... }:

{
  security = {
    audit.enable = true;
    auditd.enable = true;
    hideProcessInformation = true;
  };
}