security

mod/collections/pc.nix

@@ -4,6 +4,7 @@
     audio
     boot
     fonts
+    gpg
     locale
     network
     nix-configuration

mod/gpg.nix

@@ -0,0 +1,9 @@
+{ pkgs, ... }:
+{
+  environment.systemPackages = with pkgs; [ seahorse ];
+  programs.gnupg.agent = {
+    enable = true;
+    enableSSHSupport = true;
+    pinentryPackage = pkgs.pinentry-gtk2;
+  };
+}

mod/security.nix

@@ -1,9 +1,4 @@
-{ pkgs, ... }:
+{ ... }:
 {
-  environment.systemPackages = with pkgs; [ seahorse ];
+  security.protectKernelImage = true;
-  programs.gnupg.agent = {
-    enable = true;
-    enableSSHSupport = true;
-    pinentryPackage = pkgs.pinentry-gtk2;
-  };
 }

mod/services.nix

@@ -7,4 +7,5 @@
     openFirewall = true;
   };
   services.udisks2.enable = true;
+  services.emacs.enable = true;
 }

mod/users.nix

@@ -17,7 +17,7 @@
     shell = pkgs.fish;
     packages = [ ];
   };
-
   home-manager.users."hd" = lib.mkAliasDefinitions options.home;
+
   users.users.root.hashedPassword = "!";
 }