2023-05-19 11:42:43 +02:00
|
|
|
{ pkgs, ... }:
|
2023-01-21 19:03:24 +01:00
|
|
|
{
|
2023-06-03 21:42:12 +02:00
|
|
|
# open ports for kde connect
|
|
|
|
|
networking.firewall = rec {
|
|
|
|
|
allowedTCPPortRanges = [{ from = 1714; to = 1764; }];
|
|
|
|
|
allowedUDPPortRanges = allowedTCPPortRanges;
|
|
|
|
|
};
|
2023-01-21 19:03:24 +01:00
|
|
|
# fixes pam entries for swaylock
|
|
|
|
|
security.pam.services.swaylock.text = ''
|
|
|
|
|
# Account management.
|
|
|
|
|
account required pam_unix.so
|
|
|
|
|
|
|
|
|
|
# Authentication management.
|
|
|
|
|
|
|
|
|
|
auth sufficient pam_unix.so nullok likeauth try_first_pass
|
|
|
|
|
auth sufficient ${pkgs.fprintd}/lib/security/pam_fprintd.so
|
|
|
|
|
auth required pam_deny.so
|
|
|
|
|
|
|
|
|
|
# Password management.
|
|
|
|
|
password sufficient pam_unix.so nullok sha512
|
|
|
|
|
|
|
|
|
|
# Session management.
|
|
|
|
|
session required pam_env.so conffile=/etc/pam/environment readenv=0
|
|
|
|
|
session required pam_unix.so
|
|
|
|
|
'';
|
|
|
|
|
}
|
