From 6c2ae1efed676664f60d0db372b2abc9e68dbd44 Mon Sep 17 00:00:00 2001
From: Timo Bingmann <tbgit@panthema.net>
Date: Fri, 19 Sep 2025 22:32:52 -0700
Subject: [PATCH] Disable core dumps via pam

---
 system/linux/system.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/system/linux/system.nix b/system/linux/system.nix
index d186d43..1db2bb4 100644
--- a/system/linux/system.nix
+++ b/system/linux/system.nix
@@ -12,4 +12,9 @@
   # Disable coredumps to prevent filling up /var/lib/systemd/coredump/
   # Coredumps can quickly consume large amounts of disk space
   systemd.coredump.enable = false;
+
+  # Disable core dumps.
+  security.pam.loginLimits = [
+    { domain = "*"; item = "core"; type = "hard"; value = "0"; }
+  ];
 }