2 files changed, 10 insertions, 0 deletions

diff --git a/usecases/server/audit.nix b/usecases/server/audit.nix
new file mode 100644
index 0000000..c59bfba
--- /dev/null
+++ b/usecases/server/audit.nix
@@ -0,0 +1,9 @@
+inputs:
+
+{ pkgs, ... }:
+
+{
+  security.audit.enable = true;
+
+  environment.systemPackages = with pkgs; [ lynis ];
+}
diff --git a/usecases/server/default.nix b/usecases/server/default.nix
index f32728a..79a7263 100644
--- a/usecases/server/default.nix
+++ b/usecases/server/default.nix
@@ -6,6 +6,7 @@ inputs:
 
 {
   imports = [
+    (import ./audit.nix inputs)
     (import ./fail2ban.nix inputs)
     (import ./monitoring-target.nix inputs)
   ];