illustris/desktop
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

dnssec, gpg-agent

Browse Source
This commit is contained in:
illustris 2023-03-05 16:29:26 +05:30
parent c27ca8a729
commit f23829ff43
Signed by: illustris
GPG Key ID: 56C8FC0B899FEFA3
2 changed files with 20 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
configuration.nix
View File

@ -64,6 +64,16 @@
]); ]);
}; };
home-manager.users.illustris = { ... }: {
home.stateVersion = "23.05";
services.gpg-agent = {
enable = true;
defaultCacheTtl = 60*60*12;
defaultCacheTtlSsh = 60*60*12;
extraConfig = "auto-expand-secmem";
};
};
# for ZFS # for ZFS
networking.hostId = "f86b2fa7"; networking.hostId = "f86b2fa7";
@ -112,11 +122,11 @@
gnupg.agent = { gnupg.agent = {
enable = true; enable = true;
pinentryFlavor = "curses"; pinentryFlavor = "curses";
enableSSHSupport = true;
}; };
mosh.enable = true; mosh.enable = true;
mtr.enable = true; mtr.enable = true;
ssh.startAgent = true;
}; };
security.sudo.wheelNeedsPassword = false; security.sudo.wheelNeedsPassword = false;
@ -130,7 +140,6 @@
settings.X11Forwarding = true; settings.X11Forwarding = true;
}; };
qemuGuest.enable = true; qemuGuest.enable = true;
resolved.enable = true;
udev = { udev = {
# TODO: check if still needed # TODO: check if still needed
extraRules = '' extraRules = ''
@ -150,7 +159,7 @@
}; };
in { in {
illustris = { illustris = {
extraGroups = [ "adb" "docker" "libvirtd" "tty" "wheel" ]; extraGroups = [ "adb" "docker" "libvirtd" "plugdev" "tty" "wheel" ];
isNormalUser = true; isNormalUser = true;
openssh.authorizedKeys.keyFiles = [ ghKeys ]; openssh.authorizedKeys.keyFiles = [ ghKeys ];
}; };

9
networking-configuration.nix
View File

@ -5,5 +5,12 @@
hostName = "desktop"; hostName = "desktop";
networkmanager.enable = true; networkmanager.enable = true;
}; };
services.zerotierone.enable = true; services = {
resolved = {
enable = true;
# git.sr.ht fails to resolve with dnssec
dnssec = "false";
};
zerotierone.enable = true;
};
} }