add veracrypt executable

configuration.nix

@@ -5,6 +5,10 @@
 { config, lib, pkgs, ... }:
 
 {
+
+  system.autoUpgrade.enable = true;
+  system.autoUpgrade.allowReboot = true;
+
   console.keyMap = "de";
 
   imports =
@@ -19,6 +23,7 @@
       modules/root-programs.nix
       modules/smb.nix
       modules/tailscale.nix
+      modules/veracrypt.nix
 
       #Server
       modules/nextcloud.nix

modules/root-programs.nix

@@ -20,10 +20,10 @@
     #coding
     python3
 
-   #network
-   dig
+    #network
+    dig
 
-   #lets encrypt
-   lego
+    #lets encrypt
+    lego
    ];
 }

modules/smb.nix

@@ -18,6 +18,19 @@
     securityType = "user";
 
     extraConfig = ''
+
+      # Server-seitige SMB-Signatur erzwingen
+      server signing = mandatory
+      client signing = mandatory
+
+      # Aktiviert die Unterstützung für SMB2 und SMB3
+      server min protocol = SMB2
+      server max protocol = SMB3
+
+      # Erlaubt sichere Negotation von Verbindungen
+      client min protocol = SMB2
+      client max protocol = SMB3
+
       workgroup = WORKGROUP
       server string = BFDS
       netbios name = BFDS

modules/veracrypt.nix

@@ -0,0 +1,14 @@
+{ config, lib, pkgs, ... }:
+
+{
+  nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) 
+  [
+    "veracrypt"
+  ];
+
+
+
+  environment.systemPackages = [
+    pkgs.veracrypt
+  ];
+}