Bun/nixos-config
1
0
Fork 1
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Move and rename some stuff whatever

Browse source
This commit is contained in:
Jimbo 2024-12-09 23:07:20 -05:00
parent a0cc623c4b
commit 7c5ff0253e
38 changed files with 53 additions and 127 deletions
Download patch file Download diff file Expand all files Collapse all files

2
modules/system/programs/default.nix
View file

@ -7,8 +7,6 @@
./gaming
./git
./home-manager
./nh
./security
./shells
];
}

6
modules/system/programs/git/gpg/default.nix
View file

@ -1,9 +1,5 @@
{ pkgs, ... }:
{
programs.gnupg.agent = {
enable = true;
enableSSHSupport = true;
};
programs.gnupg.agent.enable = true;
environment.systemPackages = with pkgs; [ git-crypt ];
}

8
modules/system/programs/nh/default.nix
View file

@ -1,8 +0,0 @@
{ ... }:
{
programs.nh = {
enable = true;
clean.enable = true;
flake = "/etc/nixos";
};
}

4
modules/system/programs/security/apparmor/default.nix
View file

@ -1,4 +0,0 @@
{ ... }:
{
security.apparmor.enable = true;
}

9
modules/system/programs/security/default.nix
View file

@ -1,9 +0,0 @@
{ ... }:
{
imports = [
./apparmor
./polkit
./privilege
./rtprio
];
}

7
modules/system/programs/security/polkit/default.nix
View file

@ -1,7 +0,0 @@
{ config, ... }:
{
security = {
polkit.enable = config.system.desktop.enable;
rtkit.enable = config.system.desktop.enable;
};
}

31
modules/system/programs/security/privilege/default.nix
View file

@ -1,31 +0,0 @@
{ ... }:
{
security.sudo-rs = {
enable = true;
extraRules = [
{ # Admin gets certain commands
groups = [ "admin" ];
commands = [
"/run/current-system/sw/bin/nix"
"/run/current-system/sw/bin/nh"
"/run/current-system/sw/bin/nixos-rebuild"
"/run/current-system/sw/bin/nixos-enter"
"/run/current-system/sw/bin/nix-collect-garbage"
"/run/current-system/sw/bin/nix-store"
"/run/current-system/sw/bin/systemctl"
"/run/current-system/sw/bin/pkill"
"/run/current-system/sw/bin/dd"
"/run/current-system/sw/bin/eject"
"/run/current-system/sw/bin/vgchange"
"/run/current-system/sw/bin/cp"
"/run/current-system/sw/bin/ls"
"/run/current-system/sw/bin/cat"
"/run/current-system/sw/bin/mount"
];
}
];
};
}

31
modules/system/programs/security/privilege/default.nix~
View file

@ -1,31 +0,0 @@
{ ... }:
{
security.sudo-rs = {
enable = true;
extraRules = [
{ # Admin gets certain commands
groups = [ "admin" ];
commands = [
"/run/current-system/sw/bin/nix"
"/run/current-system/sw/bin/nh"
"/run/current-system/sw/bin/nixos-rebuild"
"/run/current-system/sw/bin/nixos-enter"
"/run/current-system/sw/bin/nix-collect-garbage"
"/run/current-system/sw/bin/nix-store"
"/run/current-system/sw/bin/systemctl"
"/run/current-system/sw/bin/pkill"
"/run/current-system/sw/bin/dd"
"/run/current-system/sw/bin/eject"
"/run/current-system/sw/bin/vgchange"
"/run/current-system/sw/bin/cp"
"/run/current-system/sw/bin/ls"
"/run/current-system/sw/bin/cat"
"/run/current-system/sw/bin/mount"
];
}
];
};
}

11
modules/system/programs/security/rtprio/default.nix
View file

@ -1,11 +0,0 @@
{ ... }:
{
security.pam.loginLimits = [
{
domain = "@users";
item = "rtprio";
type = "-";
value = 1;
}
];
}