68 lines
1.8 KiB
Nix
68 lines
1.8 KiB
Nix
{ config, pkgs, lib, ... }:
|
||
with config.deviceSpecific; {
|
||
|
||
security.apparmor.enable = true;
|
||
programs.firejail.enable = true;
|
||
users.mutableUsers = false;
|
||
users.users.alukard = {
|
||
isNormalUser = true;
|
||
extraGroups = [
|
||
"sudo"
|
||
"wheel"
|
||
"networkmanager"
|
||
"disk"
|
||
"dbus"
|
||
"audio"
|
||
"docker"
|
||
"sound"
|
||
"pulse"
|
||
"adbusers"
|
||
"input"
|
||
"libvirtd"
|
||
"kvm"
|
||
"vboxusers"
|
||
"smbgrp"
|
||
"cdrom"
|
||
"scanner"
|
||
"lp"
|
||
"dialout"
|
||
"corectrl"
|
||
];
|
||
description = "Дмитрий Холкин";
|
||
uid = 1000;
|
||
hashedPassword = "$6$kDBGyd99tto$9LjQwixa7NYB9Kaey002MD94zHob1MmNbVz9kx3yX6Q4AmVgsFMGUyNuHozXprxyuXHIbOlTcf8nd4rK8MWfI/";
|
||
shell = pkgs.zsh;
|
||
};
|
||
security.sudo = {
|
||
enable = true;
|
||
extraConfig = lib.concatStrings [''
|
||
alukard ALL = (root) NOPASSWD: /run/current-system/sw/bin/btrfs fi usage /
|
||
''
|
||
(if (isLaptop) then ''
|
||
alukard ALL = (root) NOPASSWD: /run/current-system/sw/bin/tlp-stat
|
||
alukard ALL = (root) NOPASSWD: /run/current-system/sw/bin/tlp ac
|
||
alukard ALL = (root) NOPASSWD: /run/current-system/sw/bin/tlp bat
|
||
'' else "")
|
||
];
|
||
};
|
||
# nix.requireSignedBinaryCaches = false;
|
||
home-manager.useUserPackages = true;
|
||
systemd.services."user@" = { serviceConfig = { Restart = "always"; }; };
|
||
services.getty.autologinUser = "alukard";
|
||
|
||
# auto-login without greeters
|
||
# environment.loginShellInit = ''
|
||
# [[ "$(tty)" == /dev/tty? ]] && sudo /run/current-system/sw/bin/lock this
|
||
# [[ "$(tty)" == /dev/tty1 ]] && i3
|
||
# '';
|
||
# environment.systemPackages = [
|
||
# (pkgs.writeShellScriptBin "lock" ''
|
||
# if [[ "$1" == this ]]
|
||
# then args="-s"
|
||
# else args="-san"
|
||
# fi
|
||
# USER=alukard ${pkgs.vlock}/bin/vlock "$args"
|
||
# '')
|
||
# ];
|
||
}
|