Scan all core, add sudo 2h limit

This commit is contained in:
Matthieu Morin 2024-06-09 15:53:08 +00:00
parent 6ff38c96c3
commit 360d35308d
1 changed files with 12 additions and 29 deletions

View File

@ -1,29 +1,7 @@
# This file (and the global directory) holds config that i use on all hosts
{
inputs,
outputs,
...
}: {
imports =
[
inputs.home-manager.nixosModules.home-manager
./acme.nix
./auto-upgrade.nix
./fish.nix
./locale.nix
./nix.nix
./openssh.nix
./optin-persistence.nix
./podman.nix
./sops.nix
./ssh-serve-store.nix
./steam-hardware.nix
./systemd-initrd.nix
./tailscale.nix
./gamemode.nix
./nix-ld.nix
./prometheus-node-exporter.nix
]
{ inputs, outputs, configLib, ... }: {
imports = (configLib.scanPaths ./.)
++ [ inputs.home-manager.nixosModules.home-manager ]
++ (builtins.attrValues outputs.nixosModules);
home-manager.extraSpecialArgs = {
@ -31,10 +9,9 @@
};
nixpkgs = {
# you can add global overlays here
overlays = builtins.attrValues outputs.overlays;
config = {
allowUnfree = true;
};
config.allowUnfree = true;
};
# Fix for qt6 plugins
@ -44,7 +21,13 @@
};
hardware.enableRedistributableFirmware = true;
networking.domain = "m7.rs";
networking.domain = "mattmor.in";
security.sudo.extraConfig = ''
Defaults timestamp_timeout=120 # only ask for password every 2h
# Keep SSH_AUTH_SOCK so that pam_ssh_agent_auth.so can do its magic.
# Defaults env_keep + =SSH_AUTH_SOCK
'';
# Increase open file limit for sudoers
security.pam.loginLimits = [