summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--cd.nix1
-rw-r--r--modules/sanitize.nix8
-rw-r--r--mu.nix1
-rw-r--r--wu.nix1
4 files changed, 11 insertions, 0 deletions
diff --git a/cd.nix b/cd.nix
index 70c8a85ab..8bd2d712a 100644
--- a/cd.nix
+++ b/cd.nix
@@ -4,6 +4,7 @@
imports =
[
<secrets/hashedPasswords.nix>
+ ./modules/sanitize.nix
./modules/base-cac-CentOS-7-64bit.nix
./modules/exim-cd.nix
./modules/ejabberd-cd.nix # XXX echtes modul
diff --git a/modules/sanitize.nix b/modules/sanitize.nix
new file mode 100644
index 000000000..b6c749b6d
--- /dev/null
+++ b/modules/sanitize.nix
@@ -0,0 +1,8 @@
+{ ... }:
+
+{
+ nixpkgs.config.packageOverrides = pkgs:
+ {
+ nano = /var/empty;
+ };
+}
diff --git a/mu.nix b/mu.nix
index 43211c000..4ec5a21b0 100644
--- a/mu.nix
+++ b/mu.nix
@@ -11,6 +11,7 @@ in
{
imports = [
<secrets/hashedPasswords.nix>
+ ./modules/sanitize.nix
./modules/exim.nix
./modules/retiolum.nix
];
diff --git a/wu.nix b/wu.nix
index 8dc6ce521..7fb71f244 100644
--- a/wu.nix
+++ b/wu.nix
@@ -8,6 +8,7 @@ in
{
imports = [
+ ./modules/sanitize.nix
./modules/base.nix
./modules/retiolum.nix
./modules/urxvt.nix