nixos-module/defaults: set kernel paremeters/version

nix/nixos-module/defaults.nix

@@ -1,6 +1,11 @@
 { hostName, inputs, pkgs, options, lib, ... }:
 
 {
+  # No server/router runs any untrusted user code
+  boot.kernelParams = [ "mitigations=off" ];
+  # Includes wireguard
+  boot.kernelPackages = pkgs.linuxPackages_latest;
+
   nix = {
     package = pkgs.nixFlakes;
     extraOptions = "experimental-features = nix-command flakes";

nix/nixos-module/server/server2.nix

@@ -40,8 +40,6 @@
   boot.loader.grub.version = 2;
   boot.loader.grub.device = "/dev/sda";
 
-  boot.kernelParams = [ "mitigations=off" ];
-
   networking.hostName = "server2"; # Define your hostname.
   networking.hostId = "52525252";