nixos-config/hosts/prophet/boot/default.nix

{ pkgs, ... }:
{
  boot = {
    kernelPackages = pkgs.linuxPackages_hardened;
    initrd.systemd.services.root-reset.enable = lib.mkForce false;
  };
}