Jo/puzzlevision
1
0
Fork 0
mirror of https://github.com/Jokiller230/puzzlevision.git synced 2025-10-31 13:50:04 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix: disable git warn-dirty messages

Browse source 
feat: finish yubikey login and sudo requests setup
This commit is contained in:
Jo 2024-12-03 19:55:58 +01:00
parent 6443c085d4
commit 9a1f243b49
4 changed files with 50 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

22
modules/nixos/common/fonts/default.nix
View file

@ -8,14 +8,14 @@
let
cfg = config.${namespace}.common.fonts;
in {
options.${namespace}.common.fonts = {
options.${namespace}.common.fonts = with types; {
enable = mkEnableOption "Enable system font management";
#fonts = mkOption {
# type = types.package;
# default = noto-fonts;
# example = [ noto-fonts noto-fonts-emoji ];
# description = "Install additional font packages";
#};
fonts = mkOption {
type = listOf package;
default = with pkgs; [ noto-fonts noto-fonts-cjk-sans noto-fonts-cjk-serif noto-fonts-emoji nerdfonts ];
example = [ noto-fonts noto-fonts-emoji ];
description = "Install additional font packages";
};
};
config = mkIf cfg.enable {
@ -25,12 +25,6 @@ in {
environment.systemPackages = with pkgs; [ font-manager ];
fonts.packages = with pkgs; [
noto-fonts
noto-fonts-cjk-sans
noto-fonts-cjk-serif
noto-fonts-emoji
nerdfonts
]; # ++ cfg.fonts;
fonts.packages = cfg.fonts;
};
}

1
modules/nixos/common/nix/default.nix
View file

@ -22,6 +22,7 @@ in {
keep-derivations = true;
keep-outputs = true;
max-jobs = "auto";
warn-dirty = false;
};
# Garbage collection configuration.

40
modules/nixos/security/yubikey/default.nix Normal file
View file

@ -0,0 +1,40 @@
{
lib,
pkgs,
config,
namespace,
...
}: with lib; with lib.${namespace};
let
cfg = config.${namespace}.security.yubikey;
in
{
options.${namespace}.security.yubikey = with types; {
enable = mkEnableOption "Enable the Yubikey as a security device.";
key-id = mkOption {
type = listOf str;
default = [ "30650551" ];
example = [ "123456" "1234567" ];
description = "Register additional Yubikey IDs.";
};
};
config = mkIf cfg.enable {
environment.systemPackages = with pkgs; [ yubikey-manager yubioath-flutter ];
services.udev.packages = [ pkgs.yubikey-personalization ];
services.pcscd.enable = true;
programs.gnupg.agent = {
enable = true;
enableSSHSupport = true;
};
security.pam.yubico = {
enable = true;
debug = false;
mode = "challenge-response";
id = cfg.key-id;
};
};
}