diff --git a/source/_posts/caddy-nixos-part-2.md b/source/_posts/caddy-nixos-part-2.md
index 4d1e1bd..050539f 100644
--- a/source/_posts/caddy-nixos-part-2.md
+++ b/source/_posts/caddy-nixos-part-2.md
@@ -306,10 +306,18 @@ TCP Fast Open ([TFO](https://en.wikipedia.org/wiki/Tcp_fast_open)) is enabled by
 
 Kernel compiled with additional security-oriented patch set. [More details](https://wiki.archlinux.org/index.php/Security#Kernel_hardening).
 
+_NixOS [defaults](https://nixos.wiki/wiki/Linux_kernel) to the latest LTS kernel_
+
 ```
+  # Latest LTS kernel
   boot.kernelPackages = pkgs.linuxPackages_hardened;
 ```
 
+```
+  # Latest kernel
+  boot.kernelPackages = pkgs.linuxPackages_latest_hardened;
+```
+
 ## Remove old, unreferenced packages
 
 Since my web server has limited disk space, it needs to run [garbage collector](https://nixos.org/nixos/manual/index.html#sec-nix-gc) from time to time.