Add security setup.

2025-06-29 13:44:40 -04:00
parent e8711bc620
commit 3f1fcacffc
2 changed files with 30 additions and 0 deletions
--- a/nodes/hosts/common/system/security.nix
+++ b/nodes/hosts/common/system/security.nix
@@ -0,0 +1,29 @@
+{ pkgs, lib, ... }: {
+  security = {
+    rtkit.enable = true;
+    pam.services.hyprlock = {};
+
+    polkit = {
+      enable = true;
+      adminIdentities = [
+        "unix-group:wheel"
+      ];
+    };
+    
+    sudo = {
+      enable = lib.mkForce false;
+    };
+   
+    sudo-rs = {
+      enable = true;
+      wheelNeedsPassword = true;
+      execWheelOnly = true;
+    };
+  };
+
+  environment.systemPackages = [
+    pkgs.vulnix
+  ];
+}
+
+