Move and rename some stuff whatever

modules/system/settings/security/apparmor/default.nix

@@ -0,0 +1,4 @@
+{ ... }:
+{
+  security.apparmor.enable = true;
+}

modules/system/settings/security/default.nix

@@ -0,0 +1,9 @@
+{ ... }:
+{
+  imports = [
+    ./apparmor
+    ./polkit
+    ./privilege
+    ./rtprio
+  ];
+}

modules/system/settings/security/polkit/default.nix

@@ -0,0 +1,7 @@
+{ config, ... }:
+{
+  security = {
+    polkit.enable = config.system.desktop.enable;
+    rtkit.enable = config.system.desktop.enable;
+  };
+}

modules/system/settings/security/privilege/default.nix

@@ -0,0 +1,16 @@
+{ ... }:
+{
+  security = {
+    sudo.enable = false;
+    doas = {
+      enable = true;
+      extraRules = [
+        { # Give wheel root access
+          groups = [ "wheel" ];
+          keepEnv = true;
+          persist = true;
+        }
+      ];
+    };
+  };
+}

modules/system/settings/security/rtprio/default.nix

@@ -0,0 +1,11 @@
+{ ... }:
+{
+  security.pam.loginLimits = [
+    {
+      domain = "@users";
+      item = "rtprio";
+      type = "-";
+      value = 1;
+    }
+  ];
+}