unexplrd/nixos-blueprint
2
2
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

steal from MaxMur

Browse Source 
Signed-off-by: unexplrd <unexplrd@linerds.us>
This commit is contained in:
unexplrd
2025-04-03 17:57:49 +03:00
parent f31ca59f58
commit 211e509628
11 changed files with 94 additions and 84 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
modules/nixos/system/security/basic.nix
View File

@ -3,15 +3,15 @@
lib,
pkgs,
...
}:
with lib; let
}: let
inherit (lib) mkIf mkEnableOption mkDefault;
cfg = config.security.basic;
in {
options = {
security.basic.enable =
lib.mkEnableOption "enable basic security";
mkEnableOption "enable basic security";
};
config = lib.mkIf cfg.enable {
config = mkIf cfg.enable {
security = {
sudo.enable = false;
# doas.enable = true;
@ -36,7 +36,7 @@ in {
}
});
'';
apparmor.enable = lib.mkDefault true;
apparmor.enable = mkDefault true;
};
environment.systemPackages = with pkgs; [
@ -85,6 +85,6 @@ in {
"ufs"
];
nix.settings.allowed-users = lib.mkDefault ["@users"];
nix.settings.allowed-users = mkDefault ["@users"];
};
}