inputs:

{ pkgs, ... }:

{
  security.audit.enable = true;
  security.auditd.enable = true;

  environment.systemPackages = with pkgs; [ lynis ];
}