From e972c7e64f6f5f1920c973f8056f4d9407796dfb Mon Sep 17 00:00:00 2001
From: jopejoe1 <jopejoe1@missing.ninja>
Date: Thu, 12 Jun 2025 11:29:21 +0200
Subject: [PATCH] make etc immutable

---
 nixos-modules/nix/default.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/nixos-modules/nix/default.nix b/nixos-modules/nix/default.nix
index 3347003..f0494ef 100644
--- a/nixos-modules/nix/default.nix
+++ b/nixos-modules/nix/default.nix
@@ -159,6 +159,11 @@ in
       ];
     };
 
+    system.etc.overlay = {
+      mutable = false;
+      enable = true;
+    };
+
     systemd.services.nix-daemon.serviceConfig.LimitNOFILE = lib.mkForce 1048576000;
 
     networking.hosts = {