update readme & harden system

README.md

@@ -6,7 +6,14 @@ TBC
 
 ## TODO's
 
-See [TODO.md](TODO.md).
+### In Progress
+- Root on `tmpfs`
+
+### Urgent
+- N/A
+
+### Important
+- N/A
 
 ## LICENSE
 

TODO.md

@@ -1,12 +0,0 @@
-# In Progress
-- Borg Backup
-
-# Urgent
-- N/A
-
-# Important
-- NixOS Hardened
-  - `jemalloc` to replace `scudo` (Nextcloud PHP errors)
-
-# Future
-- Root on `tmpfs`

system/default.nix

@@ -1,7 +1,11 @@
+{ lib, modulesPath, ... }:
 {
   imports = [
     ./configuration.nix
     ./hardware-configuration.nix
     ./networking.nix
+    
+    "${modulesPath}/profiles/hardened.nix"
+    { environment.memoryAllocator.provider = lib.mkForce "libc"; }
   ];
 }