Scan all core, add sudo 2h limit

This commit is contained in:
Matthieu Morin 2024-06-09 15:53:08 +00:00
parent 6ff38c96c3
commit 360d35308d
1 changed files with 12 additions and 29 deletions

View File

@ -1,29 +1,7 @@
# This file (and the global directory) holds config that i use on all hosts # This file (and the global directory) holds config that i use on all hosts
{ { inputs, outputs, configLib, ... }: {
inputs, imports = (configLib.scanPaths ./.)
outputs, ++ [ inputs.home-manager.nixosModules.home-manager ]
...
}: {
imports =
[
inputs.home-manager.nixosModules.home-manager
./acme.nix
./auto-upgrade.nix
./fish.nix
./locale.nix
./nix.nix
./openssh.nix
./optin-persistence.nix
./podman.nix
./sops.nix
./ssh-serve-store.nix
./steam-hardware.nix
./systemd-initrd.nix
./tailscale.nix
./gamemode.nix
./nix-ld.nix
./prometheus-node-exporter.nix
]
++ (builtins.attrValues outputs.nixosModules); ++ (builtins.attrValues outputs.nixosModules);
home-manager.extraSpecialArgs = { home-manager.extraSpecialArgs = {
@ -31,10 +9,9 @@
}; };
nixpkgs = { nixpkgs = {
# you can add global overlays here
overlays = builtins.attrValues outputs.overlays; overlays = builtins.attrValues outputs.overlays;
config = { config.allowUnfree = true;
allowUnfree = true;
};
}; };
# Fix for qt6 plugins # Fix for qt6 plugins
@ -44,7 +21,13 @@
}; };
hardware.enableRedistributableFirmware = true; hardware.enableRedistributableFirmware = true;
networking.domain = "m7.rs"; networking.domain = "mattmor.in";
security.sudo.extraConfig = ''
Defaults timestamp_timeout=120 # only ask for password every 2h
# Keep SSH_AUTH_SOCK so that pam_ssh_agent_auth.so can do its magic.
# Defaults env_keep + =SSH_AUTH_SOCK
'';
# Increase open file limit for sudoers # Increase open file limit for sudoers
security.pam.loginLimits = [ security.pam.loginLimits = [