hd/cfg
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

restructure

Browse source
This commit is contained in:
Henri Dohmen 2025-07-14 14:45:55 +02:00
parent 4922f8f7cb
commit ffe40ca5e7
25 changed files with 84 additions and 66 deletions
Download patch file Download diff file Expand all files Collapse all files

28
mod/desktop/security.nix
View file

@ -1,28 +0,0 @@
{
config,
lib,
pkgs,
...
}:
let
cfg = config.desktop.security;
inherit (lib) mkEnableOption mkIf;
in
{
options.desktop.security.enable = mkEnableOption "Security";
config = mkIf cfg.enable {
security.protectKernelImage = true;
security.sudo.enable = false;
security.doas = {
enable = true;
extraRules = [
{
groups = [ "wheel" ];
persist = true;
keepEnv = true;
}
];
};
};
}