balsoft/nixos-config
1
0
Fork 0
Code Issues Releases Wiki Activity

Polkit stuff

Browse Source
This commit is contained in:
Alexander Bantyev 2021-03-18 14:08:07 +03:00
parent ae6c4c3343
commit 2bdccc9fdb
Signed by: balsoft
GPG Key ID: E081FF12ADCB4AD5
3 changed files with 35 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
modules/applications/firefox.nix
View File

@ -8,6 +8,10 @@ in {
}; };
programs.browserpass.enable = true; programs.browserpass.enable = true;
home-manager.users.balsoft = lib.mkIf (config.deviceSpecific.goodMachine) { home-manager.users.balsoft = lib.mkIf (config.deviceSpecific.goodMachine) {
programs.browserpass = {
enable = true;
browsers = [ "firefox" ];
};
programs.firefox = { programs.firefox = {
enable = true; enable = true;
package = pkgs.firefox-wayland; package = pkgs.firefox-wayland;

19
modules/security.nix
View File

@ -29,7 +29,18 @@
systemd.services."user@" = { serviceConfig = { Restart = "always"; }; }; systemd.services."user@" = { serviceConfig = { Restart = "always"; }; };
home-manager.users.balsoft.home.activation.yubi = { home-manager.users.balsoft = {
systemd.user.services.polkit-agent = {
Unit = {
Description = "Run polkit authentication agent";
X-RestartIfChanged = true;
};
Install.WantedBy = [ "sway-session.target" ];
Service = { ExecStart = "${pkgs.mate.mate-polkit}/libexec/polkit-mate-authentication-agent-1"; };
};
home.activation.yubi = {
data = '' data = ''
mkdir -p .config/Yubico mkdir -p .config/Yubico
[ -f /home/balsoft/.config/Yubico/u2f_keys ] || (pamu2fcfg > /home/balsoft/.config/Yubico/u2f_keys) [ -f /home/balsoft/.config/Yubico/u2f_keys ] || (pamu2fcfg > /home/balsoft/.config/Yubico/u2f_keys)
@ -37,6 +48,7 @@
after = [ "linkGeneration" ]; after = [ "linkGeneration" ];
before = [ ]; before = [ ];
}; };
};
services.udev.extraRules = '' services.udev.extraRules = ''
ACTION=="remove", ATTRS{idVendor}=="1050", RUN+="${pkgs.systemd}/bin/loginctl lock-sessions" ACTION=="remove", ATTRS{idVendor}=="1050", RUN+="${pkgs.systemd}/bin/loginctl lock-sessions"
@ -62,7 +74,10 @@
then args="-s" then args="-s"
else args="-san" else args="-san"
fi fi
# ${lib.optionalString (config.deviceSpecific.isLaptop) ''USER=balsoft ${pkgs.vlock}/bin/vlock "$args"''} # ${
lib.optionalString (config.deviceSpecific.isLaptop)
''USER=balsoft ${pkgs.vlock}/bin/vlock "$args"''
}
'') '')
]; ];

12
modules/workspace/sway/default.nix
View File

@ -93,13 +93,11 @@ in {
{ command = apps.browser.cmd; } { command = apps.browser.cmd; }
{ command = apps.mail.cmd; } { command = apps.mail.cmd; }
{ # {
command = # command =
"${pkgs.mate.mate-polkit}/libexec/polkit-mate-authentication-agent-1"; # "${pkgs.mate.mate-polkit}/libexec/polkit-mate-authentication-agent-1";
} # }
{ command = "${pkgs.neochat}/bin/neochat"; } { command = "${pkgs.nheko}/bin/nheko"; }
{ command = "${pkgs.xorg.xrdb}/bin/xrdb -merge ~/.Xresources"; }
{ {
command = command =
"swayidle -w before-sleep '${lock_fork}' lock '${lock_fork}' unlock 'pkill -9 swaylock'"; "swayidle -w before-sleep '${lock_fork}' lock '${lock_fork}' unlock 'pkill -9 swaylock'";