diff options
| author | adikro <adikro@disroot.org> | 2026-03-13 23:41:17 +0100 |
|---|---|---|
| committer | adikro <adikro@disroot.org> | 2026-03-13 23:41:17 +0100 |
| commit | f0c0e311c003057f24d8045509a627ad2acab978 (patch) | |
| tree | a1955fe601c487aab46fa47838cd25b8273508ac /os/core/security.nix | |
| parent | ffefb53956c38909da77fe7ebbbb5d8b5dd823b9 (diff) | |
removing obsolete stuff
Diffstat (limited to 'os/core/security.nix')
| -rw-r--r-- | os/core/security.nix | 18 |
1 files changed, 14 insertions, 4 deletions
diff --git a/os/core/security.nix b/os/core/security.nix index f1c41c2..afd2b2a 100644 --- a/os/core/security.nix +++ b/os/core/security.nix @@ -2,6 +2,7 @@ config, lib, pkgs, + username, ... }: let @@ -13,6 +14,17 @@ in services.gnome.gnome-keyring.enable = true; security = { + doas = { + enable = true; + extraRules = [ + { + users = [ username ]; + keepEnv = true; + persist = true; + } + ]; + }; + # sudo.enable = false; pam.services = { swaylock = { }; login.enableGnomeKeyring = true; @@ -22,13 +34,11 @@ in }; environment.systemPackages = with pkgs; [ - veracrypt + doas-sudo-shim + veracrypt bitwarden-desktop - keyguard - keepassxc - keepassxc-go git-credential-keepassxc ]; }; |
