From f0c0e311c003057f24d8045509a627ad2acab978 Mon Sep 17 00:00:00 2001
From: adikro <adikro@disroot.org>
Date: Fri, 13 Mar 2026 23:41:17 +0100
Subject: removing obsolete stuff

---
 os/core/security.nix | 18 ++++++++++++++----
 1 file changed, 14 insertions(+), 4 deletions(-)

(limited to 'os/core/security.nix')

diff --git a/os/core/security.nix b/os/core/security.nix
index f1c41c2..afd2b2a 100644
--- a/os/core/security.nix
+++ b/os/core/security.nix
@@ -2,6 +2,7 @@
   config,
   lib,
   pkgs,
+  username,
   ...
 }:
 let
@@ -13,6 +14,17 @@ in
     services.gnome.gnome-keyring.enable = true;
 
     security = {
+      doas = {
+        enable = true;
+        extraRules = [
+          {
+            users = [ username ];
+            keepEnv = true;
+            persist = true;
+          }
+        ];
+      };
+      # sudo.enable = false;
       pam.services = {
         swaylock = { };
         login.enableGnomeKeyring = true;
@@ -22,13 +34,11 @@ in
     };
 
     environment.systemPackages = with pkgs; [
-      veracrypt
+      doas-sudo-shim
 
+      veracrypt
       bitwarden-desktop
-      keyguard
-
       keepassxc
-      keepassxc-go
       git-credential-keepassxc
     ];
   };
-- 
cgit v1.3