{ ... }:

{
  # fileSystems."/".options = [ "noexec" ];
  # fileSystems."/etc/nixos".options = [ "noexec" ];
  # fileSystems."/srv".options = [ "noexec" ];
  # fileSystems."/var/log".options = [ "noexec" ];
}
