diff options
| author | adikro <adikro@disroot.org> | 2026-02-12 23:04:24 +0100 |
|---|---|---|
| committer | adikro <adikro@disroot.org> | 2026-02-12 23:04:24 +0100 |
| commit | 512483106110b5f9209bb03238d44b991fe15d22 (patch) | |
| tree | 94b53e9e610053d4584f00799843c901d10e0b19 /os/core | |
| parent | 9868584ddabad45a9964ae9bf64d109963fd1e3d (diff) | |
thinkpad configuration finalization
Diffstat (limited to 'os/core')
| -rw-r--r-- | os/core/bootloader.nix | 1 | ||||
| -rw-r--r-- | os/core/greet.nix | 9 | ||||
| -rw-r--r-- | os/core/security.nix | 34 | ||||
| -rw-r--r-- | os/core/ssh.nix | 12 | ||||
| -rw-r--r-- | os/core/storage.nix | 1 | ||||
| -rw-r--r-- | os/core/users.nix | 2 |
6 files changed, 37 insertions, 22 deletions
diff --git a/os/core/bootloader.nix b/os/core/bootloader.nix index 7f3a85e..dfd9101 100644 --- a/os/core/bootloader.nix +++ b/os/core/bootloader.nix @@ -12,7 +12,6 @@ in type = lib.types.enum [ "systemd-boot" "grub" - "none" ]; default = "systemd-boot"; description = "Which bootloader to use"; diff --git a/os/core/greet.nix b/os/core/greet.nix index 953b017..cf814af 100644 --- a/os/core/greet.nix +++ b/os/core/greet.nix @@ -1,4 +1,9 @@ -{ config, lib, pkgs, ... }: +{ + config, + lib, + pkgs, + ... +}: let cfg = config.os.core.greet; in @@ -24,6 +29,6 @@ in }; security.pam.services.greetd.enableGnomeKeyring = true; - environment.systemPackages = with pkgs; [ tuigreet ]; + # environment.systemPackages = with pkgs; [ tuigreet ]; }; } diff --git a/os/core/security.nix b/os/core/security.nix index e8c541c..bc2c41c 100644 --- a/os/core/security.nix +++ b/os/core/security.nix @@ -1,4 +1,9 @@ -{ config, lib, pkgs, ... }: +{ + config, + lib, + pkgs, + ... +}: let cfg = config.os.core.security; in @@ -8,22 +13,25 @@ in services.gnome.gnome-keyring.enable = true; security = { - pam.services.swaylock = {}; + pam.services = { + swaylock = { }; + login.enableGnomeKeyring = true; + }; polkit.enable = true; rtkit.enable = true; }; - systemd.user.services.polkit-gnome-authentication-agent-1 = { - description = "gnome-polkit-authentication-agent-1"; - wantedBy = [ "graphical-session.target" ]; - serviceConfig = { - Type = "simple"; - ExecStart = "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1"; - Restart = "on-failure"; - RestartSec = 1; - TimeoutStopSec = 10; - }; - }; + # systemd.user.services.polkit-gnome-authentication-agent-1 = { + # description = "gnome-polkit-authentication-agent-1"; + # wantedBy = [ "graphical-session.target" ]; + # serviceConfig = { + # Type = "simple"; + # ExecStart = "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1"; + # Restart = "on-failure"; + # RestartSec = 1; + # TimeoutStopSec = 10; + # }; + # }; environment.systemPackages = with pkgs; [ veracrypt diff --git a/os/core/ssh.nix b/os/core/ssh.nix index 2fb35f8..4069d31 100644 --- a/os/core/ssh.nix +++ b/os/core/ssh.nix @@ -1,4 +1,10 @@ -{ config, lib, pkgs, username, ... }: +{ + config, + lib, + pkgs, + username, + ... +}: let cfg = config.os.core.ssh; in @@ -10,9 +16,7 @@ in openFirewall = true; }; - services.openssh = { - enable = true; - }; + services.openssh.enable = true; programs.gnupg.agent = { enable = true; diff --git a/os/core/storage.nix b/os/core/storage.nix index 59f0093..8527bac 100644 --- a/os/core/storage.nix +++ b/os/core/storage.nix @@ -8,7 +8,6 @@ in }; config = lib.mkIf cfg.enable { nix.settings.auto-optimise-store = true; - programs.nh.enable = true; services.fstrim.enable = true; services.btrfs.autoScrub = { enable = true; diff --git a/os/core/users.nix b/os/core/users.nix index 03eff8a..86c015c 100644 --- a/os/core/users.nix +++ b/os/core/users.nix @@ -23,7 +23,7 @@ in extraGroups = lib.mkMerge [ [ "wheel" ] - (lib.mkIf (config.os.core.drivers.amd.enable or false) [ + (lib.mkIf (config.os.core.drivers.graphics.enable or false) [ "video" "render" ]) |
