flakes/hosts/winter/security.nix
2021-05-26 21:11:42 +07:00

24 lines
427 B
Nix

{ config, pkgs, ... }: {
networking.firewall.enable = false;
services.openssh.enable = true;
security = {
polkit.enable = true;
sudo.enable = false;
doas = {
enable = true;
extraRules = [
{
groups = ["wheel"];
keepEnv = true;
persist = true;
}
];
};
};
programs.gnupg.agent = {
enable = true;
pinentryFlavor = "gnome3";
};
}