4a5f0ba1a7
Les nouvelles règles dans NixOS obligent à avoir dans networking.hostName un label DNS strict, il faut donc préciser le domaine à part dans networking.domain. networking.fqdn est une facilité pour concaténer les deux, en lecture seule.
43 lines
944 B
Nix
43 lines
944 B
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
let
|
|
inherit (lib) mkIf mkMerge mkThenElse;
|
|
annuaire = config.r6d.machines;
|
|
currentMachine = annuaire."${config.networking.fqdn}";
|
|
flags = currentMachine.configurationFlags;
|
|
in
|
|
|
|
mkIf true {
|
|
|
|
# Services
|
|
# https://github.com/NixOS/nixpkgs/issues/15960
|
|
|
|
services = {
|
|
pcscd.enable = true;
|
|
|
|
udev.packages = with pkgs; [
|
|
libu2f-host
|
|
yubikey-personalization
|
|
];
|
|
|
|
xserver.displayManager.sessionCommands = ''
|
|
# https://github.com/NixOS/nixpkgs/commit/5391882ebd781149e213e8817fba6ac3c503740c
|
|
gpg-connect-agent /bye
|
|
GPG_TTY=$(tty)
|
|
export GPG_TTY
|
|
'';
|
|
};
|
|
users.extraGroups.yubikey = {};
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
gnupg opensc pcsctools libu2f-host yubikey-personalization
|
|
];
|
|
|
|
security.pam.u2f.enable = true;
|
|
|
|
/*users.extraUsers.joko = {
|
|
isNormalUser = true;
|
|
extraGroups = [ "wheel" "input" "audio" "video" ];
|
|
};*/
|
|
}
|