Move and rename some stuff whatever

modules/system/settings/default.nix

@@ -2,9 +2,10 @@
 {
   imports = [
     ./documentation
-    ./fonts
+    ./font
     ./minimal
     ./nix
+    ./security
     ./timezone
   ];
 }

modules/system/settings/font/default.nix

@@ -0,0 +1,4 @@
+{ pkgs, ... }:
+{
+  console.font = "${pkgs.terminus_font}/share/consolefonts/ter-u22n.psf.gz";
+}

modules/system/settings/fonts/default.nix

@@ -1,7 +0,0 @@
-{ pkgs, ... }:
-{
-  console = {
-    font = "${pkgs.terminus_font}/share/consolefonts/ter-u22n.psf.gz";
-    packages = with pkgs; [ terminus_font ];
-  };
-}

modules/system/settings/nix/default.nix

@@ -2,6 +2,7 @@
 {
   imports = [
     ./autoupgrade
+    ./gc
   ];
 
   nix.settings = {

modules/system/settings/nix/gc/default.nix

@@ -0,0 +1,8 @@
+{ ... }:
+{
+  nix.gc = {
+    automatic = true;
+    dates = "weekly";
+    options = "--delete-older-than 1w";
+  };
+}

modules/system/settings/security/apparmor/default.nix

@@ -0,0 +1,4 @@
+{ ... }:
+{
+  security.apparmor.enable = true;
+}

modules/system/settings/security/default.nix

@@ -0,0 +1,9 @@
+{ ... }:
+{
+  imports = [
+    ./apparmor
+    ./polkit
+    ./privilege
+    ./rtprio
+  ];
+}

modules/system/settings/security/polkit/default.nix

@@ -0,0 +1,7 @@
+{ config, ... }:
+{
+  security = {
+    polkit.enable = config.system.desktop.enable;
+    rtkit.enable = config.system.desktop.enable;
+  };
+}

modules/system/settings/security/privilege/default.nix

@@ -0,0 +1,16 @@
+{ ... }:
+{
+  security = {
+    sudo.enable = false;
+    doas = {
+      enable = true;
+      extraRules = [
+        { # Give wheel root access
+          groups = [ "wheel" ];
+          keepEnv = true;
+          persist = true;
+        }
+      ];
+    };
+  };
+}

modules/system/settings/security/rtprio/default.nix

@@ -0,0 +1,11 @@
+{ ... }:
+{
+  security.pam.loginLimits = [
+    {
+      domain = "@users";
+      item = "rtprio";
+      type = "-";
+      value = 1;
+    }
+  ];
+}