Commit graph

20 commits

Author SHA1 Message Date
a6460fede4 feat: Require password for sudo wheel users
The default value for `wheelNeedsPassword` has been changed to `true` in `base/default.nix`. The redundant entry in `gui/default.nix` setting `wheelNeedsPassword` to `true` was removed as it is now enforced by the base module.
2024-06-25 11:03:16 +02:00
e9076baeee feat: Require password for sudo wheel group
This change updates the settings in the GUI module for the sudo wheel group. The security policy has been modified to require a password when a member of the wheel group attempts to use sudo.
2024-06-25 10:36:32 +02:00
20cefaf839 feat: Update garbage collection options
Adjust default garbage collection intervals and retention periods. Set default GC to run weekly and retain 14 days on nixos module and to run daily and retain 7 days on the 64-linux module.

Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-06-25 10:10:33 +02:00
58dd6f0e63 feat: Set default for sudo wheelNeedsPassword in base and gui services
The update modifies the default setting for the 'sudo wheelNeedsPassword' option in both the base and gui modules/services. Now, the base service has 'sudo wheelNeedsPassword' marked as a default option and disabled by default in the gui service.
2024-06-25 10:06:08 +02:00
6d4be557f8 style: fix indentation and spacing issues
This commit corrects the code's formatting in two parts:
1) It normalizes the indentation in the BindPaths block under aesmd_dcap/default.nix.
2) It also removes the extra space before "DE" in the default_phone_region setting in nextcloud.nix.
2024-06-22 15:12:57 +02:00
6b9d04bb59 feat: remove "--refresh" flag from autoUpgrade
This commit removes the "--refresh" flag from the system.autoUpgrade field in the default.nix file. The update function will now rely on the remaining flags only.
2024-06-12 10:54:13 +02:00
5c07871808 feat: Enable Git program in base services
The primary change in this commit enables the Git program in the base/default service module. This marks a configuration alteration at the systems level, transferring the 'programs.git.enable' declaration from 'systems/x86_64-linux/mx/default.nix' to 'modules/nixos/services/base/default.nix'. We've undertaken this change for better structuring of our service configuration.
2024-06-12 10:52:58 +02:00
712f3aaeb7 feat(nixos-services): add refresh option to autoUpgrade
This commit adds a new "--refresh" flag to the system.autoUpgrade in the NixOS services base module.
2024-06-12 10:31:24 +02:00
a7484b3891 feat: Move kernel package override to specific system configs
This commit moves the kernel package version override from the base nixos service to specific system configurations. Now, the latest linux packages will be used only in the system configurations where the override has been explicitly added. This approach gives us more flexibility to handle different kernel package versions for different systems.
2024-06-03 13:21:50 +02:00
40ee6ff1f2 feat: nixos 24.05
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-06-03 11:06:26 +02:00
db296ef226 feat: add BindPaths to systemd services in aesmd_dcap
This commit updates systemd services configuration of aesmd_dcap by adding a new directory to BindPaths. The file "/dev/log" has been added to ensure proper logging.
2024-05-21 15:44:00 +02:00
27fc4658e1 feat: update input 'nixsgx-flake' instead of 'nixsgx' 2024-05-21 15:22:43 +02:00
2994566928 feat: update nixsgx input in autoUpgrade 2024-05-21 15:18:32 +02:00
b253dd4e58 feat: Add gnome.cheese and pstree to gui default services
This commit includes gnome.cheese and pstree to the list of default services in the gui module. Users will now have these services available by default in the graphical user interface.
2024-05-21 11:28:43 +02:00
bcbd179bf2 nix: set TMPDIR to /var/tmp
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-28 10:30:42 +01:00
21e1464534 remove ~/.cargo/bin path
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-26 09:51:09 +01:00
30754f5211 different fish exec workaround
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-25 11:40:05 +01:00
1ebef44098 nix: turn off relaxed sandbox mode
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-22 22:30:14 +01:00
ad2fc117c7 fish: add missing exec
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-21 21:17:20 +01:00
f4e2368893 A new start 2024-03-21 15:00:36 +01:00