summaryrefslogtreecommitdiff
path: root/os/core/security.nix
diff options
context:
space:
mode:
Diffstat (limited to 'os/core/security.nix')
-rw-r--r--os/core/security.nix18
1 files changed, 14 insertions, 4 deletions
diff --git a/os/core/security.nix b/os/core/security.nix
index f1c41c2..afd2b2a 100644
--- a/os/core/security.nix
+++ b/os/core/security.nix
@@ -2,6 +2,7 @@
config,
lib,
pkgs,
+ username,
...
}:
let
@@ -13,6 +14,17 @@ in
services.gnome.gnome-keyring.enable = true;
security = {
+ doas = {
+ enable = true;
+ extraRules = [
+ {
+ users = [ username ];
+ keepEnv = true;
+ persist = true;
+ }
+ ];
+ };
+ # sudo.enable = false;
pam.services = {
swaylock = { };
login.enableGnomeKeyring = true;
@@ -22,13 +34,11 @@ in
};
environment.systemPackages = with pkgs; [
- veracrypt
+ doas-sudo-shim
+ veracrypt
bitwarden-desktop
- keyguard
-
keepassxc
- keepassxc-go
git-credential-keepassxc
];
};