diff options
Diffstat (limited to 'modules')
| -rw-r--r-- | modules/options/containers.nix | 1 | ||||
| -rw-r--r-- | modules/pc/security/pam.nix | 76 |
2 files changed, 37 insertions, 40 deletions
diff --git a/modules/options/containers.nix b/modules/options/containers.nix index a60f498..cb8c98f 100644 --- a/modules/options/containers.nix +++ b/modules/options/containers.nix @@ -1,5 +1,4 @@ { lib, ... }: -with lib.options; with lib.types; { options.modules.containers = { diff --git a/modules/pc/security/pam.nix b/modules/pc/security/pam.nix index b7eb426..e800071 100644 --- a/modules/pc/security/pam.nix +++ b/modules/pc/security/pam.nix @@ -1,50 +1,48 @@ { - security = { - pam = { - loginLimits = [ - { - domain = "@wheel"; - item = "nofile"; - type = "soft"; - value = "524288"; - } - { - domain = "@wheel"; - item = "nofile"; - type = "hard"; - value = "1048576"; - } - ]; + security.pam = { + loginLimits = [ + { + domain = "@wheel"; + item = "nofile"; + type = "soft"; + value = "524288"; + } + { + domain = "@wheel"; + item = "nofile"; + type = "hard"; + value = "1048576"; + } + ]; - services = - let - ttyAudit = { - enable = true; - enablePattern = "*"; - }; - in - { - swaylock.text = "auth include login"; - gtklock.text = "auth include login"; + services = + let + ttyAudit = { + enable = true; + enablePattern = "*"; + }; + in + { + swaylock.text = "auth include login"; + gtklock.text = "auth include login"; - login = { - inherit ttyAudit; + login = { + inherit ttyAudit; - setLoginUid = true; - }; + setLoginUid = true; + }; - sshd = { - inherit ttyAudit; + sshd = { + inherit ttyAudit; - setLoginUid = true; - }; + setLoginUid = true; + }; - sudo = { - inherit ttyAudit; + sudo = { + inherit ttyAudit; - setLoginUid = true; - }; + setLoginUid = true; }; - }; + }; }; } |