faukah/nichts
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

treewide: format using nixfmt

Browse source 
Signed-off-by: Bloxx12 <charlie@charlieroot.dev>
Change-Id: I6a6a69641c36f9763e104087a559c148d0449f00
This commit is contained in:
Bloxx12 2025-07-20 01:23:48 +02:00
commit e641dfa114
Signed by: faukah
SSH key fingerprint: SHA256:jpYIt4Vkz1NBTQcks/N9OPTfTFxE6KF2W/rV7hrfrIw
113 changed files with 1545 additions and 1019 deletions
Download patch file Download diff file Expand all files Collapse all files

5
modules/system/os/security/security.mod.nix
View file

@ -1,11 +1,12 @@
{pkgs, ...}: {
{ pkgs, ... }:
{
security = {
# Enable Soteria, a GTK-based Polkit authentication agent.
soteria.enable = true;
apparmor = {
enable = true;
killUnconfinedConfinables = true;
packages = [pkgs.apparmor-profiles];
packages = [ pkgs.apparmor-profiles ];
};
pam.services = {

8
modules/system/os/security/sudo.mod.nix
View file

@ -2,16 +2,18 @@
lib,
pkgs,
...
}: let
}:
let
inherit (lib.modules) mkForce mkDefault;
in {
in
{
security = {
sudo-rs.enable = mkForce false;
sudo = {
enable = true;
# We use the default sudo package, but with insults if we
# fail to provide the correct password
package = pkgs.sudo.override {withInsults = true;};
package = pkgs.sudo.override { withInsults = true; };
# Wheel user should need the password to execute sudo commands
wheelNeedsPassword = mkDefault true;