Harald Hoyer
6d4be557f8
This commit corrects the code's formatting in two parts: 1) It normalizes the indentation in the BindPaths block under aesmd_dcap/default.nix. 2) It also removes the extra space before "DE" in the default_phone_region setting in nextcloud.nix.
36 lines
890 B
Nix
36 lines
890 B
Nix
{ options, config, lib, pkgs, ... }:
|
|
|
|
with lib;
|
|
with lib.metacfg;
|
|
let
|
|
cfg = config.metacfg.aesmd_dcap;
|
|
in
|
|
{
|
|
options.metacfg.aesmd_dcap = with types; {
|
|
enable = mkBoolOpt false "Whether or not to enable aesmd in dcap mode.";
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
metacfg = {
|
|
nix.extra-substituters = {
|
|
"https://nixsgx.cachix.org".key = "nixsgx.cachix.org-1:tGi36DlY2joNsIXOlGnSgWW0+E094V6hW0umQRo/KoE=";
|
|
};
|
|
};
|
|
services.aesmd = {
|
|
enable = true;
|
|
quoteProviderLibrary = pkgs.nixsgx.sgx-dcap.default_qpl;
|
|
};
|
|
systemd.services.aesmd = {
|
|
environment.LD_LIBRARY_PATH = lib.mkForce (lib.makeLibraryPath [ pkgs.nixsgx.sgx-dcap.default_qpl pkgs.curl.out ]);
|
|
serviceConfig = {
|
|
BindReadOnlyPaths = [
|
|
"/etc/sgx_default_qcnl.conf"
|
|
];
|
|
BindPaths = [
|
|
"/dev/log"
|
|
];
|
|
};
|
|
};
|
|
};
|
|
}
|