services.rke2.cisHardening
NixOS option
Enable CIS Hardening for RKE2. The OS-level configuration options required to pass the CIS benchmark are enabled by default. This option only creates the etcd user and group, and passes the --profile=cis flag to RKE2. Learn more about CIS Hardening for RKE2.
type: booleanDefault
declared in: nixos/modules/services/cluster/rancher/default.nixView source on NixOS/nixpkgs →false