summaryrefslogtreecommitdiff
path: root/hel.nix
diff options
context:
space:
mode:
Diffstat (limited to 'hel.nix')
-rw-r--r--hel.nix52
1 files changed, 2 insertions, 50 deletions
diff --git a/hel.nix b/hel.nix
index 7959720a..390e75f3 100644
--- a/hel.nix
+++ b/hel.nix
@@ -78,6 +78,7 @@
78 ntfs3g 78 ntfs3g
79 exfat 79 exfat
80 rebuild-system 80 rebuild-system
81 dconf dconf-editor
81 ]; 82 ];
82 83
83 nixpkgs.config.packageOverrides = pkgs: rec { 84 nixpkgs.config.packageOverrides = pkgs: rec {
@@ -579,56 +580,7 @@
579 ''; 580 '';
580 }; 581 };
581 582
582 environment.etc."dnssec-trust-anchors.d/local-ip.negative" = { 583 programs.dconf.enable = true;
583 text = ''
584 10.in-addr.arpa
585 16.172.in-addr.arpa
586 17.172.in-addr.arpa
587 18.172.in-addr.arpa
588 19.172.in-addr.arpa
589 20.172.in-addr.arpa
590 21.172.in-addr.arpa
591 22.172.in-addr.arpa
592 23.172.in-addr.arpa
593 24.172.in-addr.arpa
594 25.172.in-addr.arpa
595 26.172.in-addr.arpa
596 27.172.in-addr.arpa
597 28.172.in-addr.arpa
598 29.172.in-addr.arpa
599 30.172.in-addr.arpa
600 31.172.in-addr.arpa
601 168.192.in-addr.arpa
602 d.f.ip6.arpa
603 '';
604 };
605
606 environment.etc."dnssec-trust-anchors.d/local-domains.negative" = {
607 text = ''
608 yggdrasil
609 box
610 '';
611 };
612
613 security.pam.services = {
614 gdm-fingerprint.text = ''
615 auth requisite pam_nologin.so
616 auth required pam_env.so envfile=${config.system.build.pamEnvironment}
617
618 auth required pam_succeed_if.so uid >= 1000 quiet
619 auth required ${pkgs.fprintd}/lib/security/pam_fprintd.so
620 auth optional ${pkgs.gnome3.gnome-keyring}/lib/security/pam_gnome_keyring.so
621
622 account sufficient pam_unix.so
623 password required ${pkgs.fprintd}/lib/security/pam_fprintd.so
624
625 session required pam_env.so envfile=${config.system.build.pamEnvironment}
626 session required pam_unix.so
627 session required pam_loginuid.so
628 session optional ${pkgs.systemd}/lib/security/pam_systemd.so
629 session optional ${pkgs.gnome3.gnome-keyring}/lib/security/pam_gnome_keyring.so auto_start
630 '';
631 };
632 584
633 system = { 585 system = {
634 stateVersion = "16.09"; 586 stateVersion = "16.09";