Files
nixos-config/modules/basic/security.nix
Morten Olsen f82f51cd81 flake.lock: Update
Flake lock file updates:

• Updated input 'home-manager':
    'github:nix-community/home-manager/a54e05bc12d88ff2df941d0dc1183cb5235fa438' (2024-02-18)
  → 'github:nix-community/home-manager/b00d0e4fe9cba0047f54e77418ddda5f17e6ef2c' (2024-04-09)
• Updated input 'home-manager/nixpkgs':
    'github:NixOS/nixpkgs/5863c27340ba4de8f83e7e3c023b9599c3cb3c80' (2024-02-16)
  → 'github:NixOS/nixpkgs/fd281bd6b7d3e32ddfa399853946f782553163b5' (2024-04-03)
• Updated input 'nixos-hardware':
    'github:NixOS/nixos-hardware/106d3fec43bcea19cb2e061ca02531d54b542ce3' (2024-02-16)
  → 'github:NixOS/nixos-hardware/05aa46a1f3b5ac92bfe84807868ba9670d48b031' (2024-04-09)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/b98a4e1746acceb92c509bc496ef3d0e5ad8d4aa' (2024-02-18)
  → 'github:NixOS/nixpkgs/4cba8b53da471aea2ab2b0c1f30a81e7c451f4b6' (2024-04-08)
• Updated input 'nur':
    'github:nix-community/NUR/393fab7036bd90aea269f2b8c105e5cb8ba553c0' (2024-02-19)
  → 'github:nix-community/NUR/ee4ce451f46a08778d1a9f9837eff0750714b08b' (2024-04-09)
2024-04-13 21:00:47 +02:00

30 lines
865 B
Nix

{ config, pkgs, ... }:
{
# enable smart card reader driver
services.pcscd.enable = true;
security.apparmor.enable = true;
programs.firejail.enable = true;
programs.firejail.wrappedBinaries = {
signal-desktop = {
executable = "${pkgs.signal-desktop}/bin/signal-desktop --enable-features=UseOzonePlatform --ozone-platform=wayland";
profile = "${pkgs.firejail}/etc/firejail/signal-desktop.profile";
extraArgs = [ "--env=LC_ALL=C" "--env=GTK_THEME=Adwaita:dark" ];
};
};
# yubikey stuff
services.udev.packages = [ pkgs.yubikey-personalization ];
environment.systemPackages = [
pkgs.yubikey-personalization
pkgs.yubikey-personalization-gui
pkgs.yubikey-manager
pkgs.yubikey-manager-qt
pkgs.yubioath-flutter
pkgs.gnupg
pkgs.pinentry-gnome3
];
networking.firewall.checkReversePath = false;
}