diff options
| author | Gregor Kleen <gkleen@yggdrasil.li> | 2016-05-18 14:59:56 +0200 |
|---|---|---|
| committer | Gregor Kleen <gkleen@yggdrasil.li> | 2016-05-18 14:59:56 +0200 |
| commit | 822469012d614d783efe0654bea85a5451799adb (patch) | |
| tree | b5f47653f5bbf7ed20e20d9f03098c5544da5248 | |
| parent | 86eb4dff381e9134d606394103a9b4a51365b37d (diff) | |
| download | nixos-822469012d614d783efe0654bea85a5451799adb.tar nixos-822469012d614d783efe0654bea85a5451799adb.tar.gz nixos-822469012d614d783efe0654bea85a5451799adb.tar.bz2 nixos-822469012d614d783efe0654bea85a5451799adb.tar.xz nixos-822469012d614d783efe0654bea85a5451799adb.zip | |
no wpa_supplicant, network perms
| -rw-r--r-- | hel.nix | 17 |
1 files changed, 9 insertions, 8 deletions
| @@ -19,14 +19,7 @@ | |||
| 19 | 19 | ||
| 20 | networking = { | 20 | networking = { |
| 21 | hostName = "hel"; | 21 | hostName = "hel"; |
| 22 | wireless = { | 22 | |
| 23 | enable = lib.mkForce true; | ||
| 24 | userControlled = { | ||
| 25 | enable = true; | ||
| 26 | group = "network"; | ||
| 27 | }; | ||
| 28 | }; | ||
| 29 | |||
| 30 | firewall = { | 23 | firewall = { |
| 31 | enable = true; | 24 | enable = true; |
| 32 | allowedTCPPorts = [ 22 # ssh | 25 | allowedTCPPorts = [ 22 # ssh |
| @@ -210,6 +203,14 @@ | |||
| 210 | ''; | 203 | ''; |
| 211 | 204 | ||
| 212 | setuidPrograms = ["slock" "mount" "mount.nfs" "umount" "newgrp" "thinklight"]; | 205 | setuidPrograms = ["slock" "mount" "mount.nfs" "umount" "newgrp" "thinklight"]; |
| 206 | |||
| 207 | polkit.extraConfig = '' | ||
| 208 | polkit.addRule(function(action, subject) { | ||
| 209 | if (action.id.indexOf("org.freedesktop.NetworkManager.") == 0 && subject.isInGroup("network")) { | ||
| 210 | return polkit.Result.YES; | ||
| 211 | } | ||
| 212 | }); | ||
| 213 | ''; | ||
| 213 | }; | 214 | }; |
| 214 | 215 | ||
| 215 | time.timeZone = "Europe/Berlin"; | 216 | time.timeZone = "Europe/Berlin"; |
