Libraries & frameworks
nix-mineral
nix-community/nix-mineral
A NixOS module for system hardening that applies kernel, filesystem, network, module blacklist, and entropy settings to reduce attack surface with configurable presets.
Topics
Related projects
nix-mineral576A NixOS module for system hardening that tightens kernel, network and filesystem settings and reduces attack surface through presets and options.
bleachbit7.4kA cross-platform system cleaner that removes caches, temporary files, and privacy traces to free disk space on Windows and Linux.
lanzaboote1.9kLanzaboote brings UEFI Secure Boot and Measured Boot to NixOS, providing the lzbt signing and UKI tooling plus a stub to harden the boot chain.
wireguard-manager1.9kWireGuard-Manager is a self-hosted script that simplifies installing and managing WireGuard VPNs on Linux, covering peers, backups, DNS, firewall rules and updates.
SlimBrave-Neo818SlimBrave Neo debloats and hardens Brave Browser using Chromium enterprise policies. It offers dozens of policies, presets, a Linux/macOS TUI and a Windows GUI to disable telemetry and tighten privacy.
hardened_malloc2.1khardened_malloc is a security-focused general-purpose memory allocator implementing the malloc API, with strong mitigations against heap corruption and use-after-free for Linux and Android.