aktualizacja domyślnego hosta

2025-08-14 13:41:54 +02:00
parent fb2279a575
commit 32dfc8772a
30 changed files with 1326 additions and 846 deletions
--- a/hosts/default/config/security.nix
+++ b/hosts/default/config/security.nix
@@ -0,0 +1,40 @@
+{...}: {
+  # Security / Polkit
+  security = {
+    rtkit.enable = true;
+    polkit = {
+      enable = true;
+      extraConfig = ''
+        polkit.addRule(function(action, subject) {
+          if (
+            subject.isInGroup("users")
+              && (
+                action.id == "org.freedesktop.login1.reboot" ||
+                action.id == "org.freedesktop.login1.reboot-multiple-sessions" ||
+                action.id == "org.freedesktop.login1.power-off" ||
+                action.id == "org.freedesktop.login1.power-off-multiple-sessions"
+              )
+            )
+          {
+            return polkit.Result.YES;
+          }
+        })
+      '';
+    };
+    pam.services.swaylock = {
+      text = ''
+        auth include login
+      '';
+    };
+    sudo = {
+      enable = true;
+      extraConfig = ''
+        Defaults	pwfeedback
+      '';
+    };
+  };
+
+  users = {
+    mutableUsers = true;
+  };
+}