41 lines
911 B
Nix
41 lines
911 B
Nix
{...}: {
|
|
# Security / Polkit
|
|
security = {
|
|
rtkit.enable = true;
|
|
polkit = {
|
|
enable = true;
|
|
extraConfig = ''
|
|
polkit.addRule(function(action, subject) {
|
|
if (
|
|
subject.isInGroup("users")
|
|
&& (
|
|
action.id == "org.freedesktop.login1.reboot" ||
|
|
action.id == "org.freedesktop.login1.reboot-multiple-sessions" ||
|
|
action.id == "org.freedesktop.login1.power-off" ||
|
|
action.id == "org.freedesktop.login1.power-off-multiple-sessions"
|
|
)
|
|
)
|
|
{
|
|
return polkit.Result.YES;
|
|
}
|
|
})
|
|
'';
|
|
};
|
|
pam.services.swaylock = {
|
|
text = ''
|
|
auth include login
|
|
'';
|
|
};
|
|
sudo = {
|
|
enable = true;
|
|
extraConfig = ''
|
|
Defaults pwfeedback
|
|
'';
|
|
};
|
|
};
|
|
|
|
users = {
|
|
mutableUsers = true;
|
|
};
|
|
}
|