From 972295c4f57f2e0fe8c5eb36e1398e20cb67cd73 Mon Sep 17 00:00:00 2001 From: Gregor Kleen Date: Sun, 7 Jun 2015 14:20:46 +0200 Subject: Tweaks for jack --- bragi.nix | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) (limited to 'bragi.nix') diff --git a/bragi.nix b/bragi.nix index 0d4c482f..3f52075f 100644 --- a/bragi.nix +++ b/bragi.nix @@ -65,9 +65,17 @@ shell = "${pkgs.zsh}/bin/zsh"; openssh.authorizedKeys.keys = [ "ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBABVMu+0txXdxdTSY8POAYVXbuOEDW6VxJzaYwQljc9kzM63VUZuE606R0g2ZGr9A+Gk6qO6fpCiq4SM+1Yygz5yHgGlbO750TOGaTe6KSGw+u3miaeDviejmxTqetGmiJe7BTLRAbYHjRgD5SkK/Ovos0cDSyOfZ5aha/ehox+proQKGA== gkleen@cathy" ]; - extraGroups = [ "wheel" ]; + extraGroups = [ "wheel" "audio" ]; hashedPassword = "$6$MBq4kwM68$Eg8O6m76mM2905VppNZO67J3EHqJVBuIWQkz.MFFa7afVQKhGuSSYHl50WkkFYXHEY5MIM7IjWYZ0UJwq2IDJ0"; }; security.setuidPrograms = ["mount.nfs"]; + + security.pam.loginLimits = + [ + { domain = "@audio"; item = "memlock"; type = "-"; value = "unlimited"; } + { domain = "@audio"; item = "rtprio"; type = "-"; value = "99"; } + { domain = "@audio"; item = "nofile"; type = "soft"; value = "99999"; } + { domain = "@audio"; item = "nofile"; type = "hard"; value = "99999"; } + ]; } -- cgit v1.2.3