From 81c25d3f205b535cbe87e0f5f478d639ef14170f Mon Sep 17 00:00:00 2001
From: Hermes Agent <hermes@lazyworkhorse.net>
Date: Fri, 1 May 2026 03:55:09 +0000
Subject: [PATCH] fix: use security.auditd instead of services.auditd

---
 hosts/lazyworkhorse/configuration.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/hosts/lazyworkhorse/configuration.nix b/hosts/lazyworkhorse/configuration.nix
index c714c77..8a51fd3 100644
--- a/hosts/lazyworkhorse/configuration.nix
+++ b/hosts/lazyworkhorse/configuration.nix
@@ -483,7 +483,7 @@
   };
 
   # Audit logging
-  services.auditd.enable = true;
+  security.auditd.enable = true;
   
   # Fail2ban log directory
   systemd.tmpfiles.rules = [