artemist/nixos-config
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Switch to sudo-rs

Browse source
This commit is contained in:
Artemis Tosini 2024-04-12 02:21:26 +00:00
parent cd7b5c07a7
commit 317da1665a
Signed by: artemist
SSH key fingerprint: SHA256:EsuWCwx6fjxxExxf65rX+ocQJJAdw4R1KarpFue6Uwc
2 changed files with 36 additions and 33 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

64
flake.lock
View file

@ -188,11 +188,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1709336216, "lastModified": 1712014858,
"narHash": "sha256-Dt/wOWeW6Sqm11Yh+2+t0dfEWxoMxGBvv3JpIocFl9E=", "narHash": "sha256-sB4SWl2lX95bExY2gMFG5HIzvva5AVMJd4Igm+GpZNw=",
"owner": "hercules-ci", "owner": "hercules-ci",
"repo": "flake-parts", "repo": "flake-parts",
"rev": "f7b3c975cf067e56e7cda6cb098ebe3fb4d74ca2", "rev": "9126214d0a59633752a136528f5f3b9aa8565b7d",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -329,11 +329,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1712390667, "lastModified": 1712759992,
"narHash": "sha256-ebq+fJZfobqpsAdGDGpxNWSySbQejRwW9cdiil6krCo=", "narHash": "sha256-2APpO3ZW4idlgtlb8hB04u/rmIcKA8O7pYqxF66xbNY=",
"owner": "nix-community", "owner": "nix-community",
"repo": "home-manager", "repo": "home-manager",
"rev": "b787726a8413e11b074cde42704b4af32d95545c", "rev": "31357486b0ef6f4e161e002b6893eeb4fafc3ca9",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -350,11 +350,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1712296875, "lastModified": 1712521891,
"narHash": "sha256-Cmyer1n39J5IucCiyy84kf1XLr1Gdz/i5HKbzzEOQYM=", "narHash": "sha256-qJRkB7QZo2mdR/nABeHQKi3xkQxUsSGjVVQXTSHQocI=",
"owner": "jovian-experiments", "owner": "jovian-experiments",
"repo": "jovian-nixos", "repo": "jovian-nixos",
"rev": "9b0e8712f1a9e5569036b227d539b745fcf54aad", "rev": "ec53086c76303dc8880fa7ba06c45abcae8b3398",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -395,11 +395,11 @@
"lix": { "lix": {
"flake": false, "flake": false,
"locked": { "locked": {
"lastModified": 1712439386, "lastModified": 1712862513,
"narHash": "sha256-gvD1samGrEe+EYGoc25lbXzQxrEviPJtDD8QG4yTUWI=", "narHash": "sha256-xTEsLCnen1zDZ7DqCnqtg8kZl13XzBKV6Qb+uAbppZM=",
"ref": "refs/heads/main", "ref": "refs/heads/main",
"rev": "08713d5a15799b4bd099e702a407c37c9bf78663", "rev": "2e13e9811af65ece69665e506c36a7791e0dc8e6",
"revCount": 15342, "revCount": 15393,
"type": "git", "type": "git",
"url": "ssh://git@lix.systems/lix-project/lix" "url": "ssh://git@lix.systems/lix-project/lix"
}, },
@ -423,11 +423,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1712377825, "lastModified": 1712775567,
"narHash": "sha256-YLliaWMaatyf0qOrgd6XIDgMh8AsAV5dAUg27bjU9VU=", "narHash": "sha256-Zn27r1W+KU5ezwvvcoo6LrJQgYQ0+BHZDQxEM6RjFVk=",
"ref": "refs/heads/main", "ref": "refs/heads/main",
"rev": "93ce1e3f5defd0091a1da2b1964a89a748257ada", "rev": "6804fe0ec5f1c24f1ca5fc2c9e11506317353a06",
"revCount": 41, "revCount": 44,
"type": "git", "type": "git",
"url": "ssh://git@lix.systems/lix-project/nixos-module" "url": "ssh://git@lix.systems/lix-project/nixos-module"
}, },
@ -443,11 +443,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1711854532, "lastModified": 1712459390,
"narHash": "sha256-JPStavwlT7TfxxiXHk6Q7sbNxtnXAIjXQJMLO0KB6M0=", "narHash": "sha256-e12bNDottaGoBgd0AdH/bQvk854xunlWAdZwr/oHO1c=",
"owner": "nix-community", "owner": "nix-community",
"repo": "nix-index-database", "repo": "nix-index-database",
"rev": "2844b5f3ad3b478468151bd101370b9d8ef8a3a7", "rev": "4676d72d872459e1e3a248d049609f110c570e9a",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -458,11 +458,11 @@
}, },
"nixos-hardware": { "nixos-hardware": {
"locked": { "locked": {
"lastModified": 1712324865, "lastModified": 1712760404,
"narHash": "sha256-+BatEWd4HlMeK7Ora+gYIkarjxFVCg9oKrIeybHIIX4=", "narHash": "sha256-4zhaEW1nB+nGbCNMjOggWeY5nXs/H0Y71q0+h+jdxoU=",
"owner": "nixos", "owner": "nixos",
"repo": "nixos-hardware", "repo": "nixos-hardware",
"rev": "f3b959627bca46a9f7052b8fbc464b8323e68c2c", "rev": "e1c4bac14beb8c409d0534382cf967171706b9d9",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -473,11 +473,11 @@
}, },
"nixpkgs": { "nixpkgs": {
"locked": { "locked": {
"lastModified": 1712163089, "lastModified": 1712608508,
"narHash": "sha256-Um+8kTIrC19vD4/lUCN9/cU9kcOsD1O1m+axJqQPyMM=", "narHash": "sha256-vMZ5603yU0wxgyQeHJryOI+O61yrX2AHwY6LOFyV1gM=",
"owner": "nixos", "owner": "nixos",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "fd281bd6b7d3e32ddfa399853946f782553163b5", "rev": "4cba8b53da471aea2ab2b0c1f30a81e7c451f4b6",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -520,11 +520,11 @@
"pre-commit-hooks": "pre-commit-hooks" "pre-commit-hooks": "pre-commit-hooks"
}, },
"locked": { "locked": {
"lastModified": 1712299511, "lastModified": 1712741888,
"narHash": "sha256-yrBK6Jq0UuJjP+nc01OFNoKRRJgPNkbmwPpE4mD2Bis=", "narHash": "sha256-G4HDgs27bwy6/snFHIhU4OZKWdFBHFuxDyCkYj2L9bw=",
"owner": "nix-community", "owner": "nix-community",
"repo": "nixvim", "repo": "nixvim",
"rev": "f285a958c089ccbca9c5710d4a075683fa1af654", "rev": "ffa3020522e210fcae934f10440c24ea1d46f6ea",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -548,11 +548,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1711760932, "lastModified": 1712579741,
"narHash": "sha256-DqUTQ2iAAqSDwMhKBqvi24v0Oc7pD3LCK/0FCG//TdA=", "narHash": "sha256-igpsH+pa6yFwYOdah3cFciCk8gw+ytniG9quf5f/q84=",
"owner": "cachix", "owner": "cachix",
"repo": "pre-commit-hooks.nix", "repo": "pre-commit-hooks.nix",
"rev": "c11e43aed6f17336c25cd120eac886b96c455731", "rev": "70f504012f0a132ac33e56988e1028d88a48855c",
"type": "github" "type": "github"
}, },
"original": { "original": {

5
sets/base.nix
View file

@ -89,7 +89,10 @@
mutableUsers = false; mutableUsers = false;
}; };
security.sudo.execWheelOnly = true; security.sudo-rs = {
enable = true;
execWheelOnly = true;
};
systemd.extraConfig = "DefaultLimitCORE=infinity"; systemd.extraConfig = "DefaultLimitCORE=infinity";
security.pam.loginLimits = [ security.pam.loginLimits = [