diff options
Diffstat (limited to 'os/core')
| -rw-r--r-- | os/core/drivers.nix | 5 | ||||
| -rw-r--r-- | os/core/security.nix | 27 |
2 files changed, 22 insertions, 10 deletions
diff --git a/os/core/drivers.nix b/os/core/drivers.nix index 77ea721..4198bf5 100644 --- a/os/core/drivers.nix +++ b/os/core/drivers.nix @@ -62,9 +62,6 @@ in hardware.graphics = { enable = true; enable32Bit = true; - extraPackages = with pkgs; [ - libva - ]; }; hardware.sensor.iio.enable = true; }) @@ -77,8 +74,6 @@ in }; hardware.graphics.extraPackages = with pkgs; [ rocmPackages.clr.icd - libva - libva-utils ]; }) { diff --git a/os/core/security.nix b/os/core/security.nix index afd2b2a..fa40372 100644 --- a/os/core/security.nix +++ b/os/core/security.nix @@ -9,9 +9,22 @@ let cfg = config.os.core.security; in { - options.os.core.security.enable = lib.mkEnableOption "core security services"; + options.os.core.security = { + enable = lib.mkEnableOption "core security services"; + fprint.enable = lib.mkEnableOption "enables fingerprint authentication"; + }; config = lib.mkIf cfg.enable { - services.gnome.gnome-keyring.enable = true; + services = { + gnome.gnome-keyring.enable = true; + fprintd = lib.mkIf cfg.fprint.enable { + enable = true; + package = pkgs.fprintd-tod; + tod = { + enable = true; + driver = pkgs.libfprint-2-tod1-vfs0090; + }; + }; + }; security = { doas = { @@ -24,10 +37,15 @@ in } ]; }; - # sudo.enable = false; + sudo.enable = false; + pam.services = { swaylock = { }; - login.enableGnomeKeyring = true; + doas.fprintAuth = cfg.fprint.enable; + login = { + enableGnomeKeyring = true; + fprintAuth = cfg.fprint.enable; + }; }; polkit.enable = true; rtkit.enable = true; @@ -35,7 +53,6 @@ in environment.systemPackages = with pkgs; [ doas-sudo-shim - veracrypt bitwarden-desktop keepassxc |