mirror of
https://git.sr.ht/~rouven/nixos-config
synced 2024-11-15 05:13:10 +01:00
27 lines
737 B
Nix
27 lines
737 B
Nix
{ pkgs, ... }:
|
|
{
|
|
# open ports for kde connect
|
|
networking.firewall = rec {
|
|
allowedTCPPortRanges = [{ from = 1714; to = 1764; }];
|
|
allowedUDPPortRanges = allowedTCPPortRanges;
|
|
};
|
|
# fixes pam entries for swaylock
|
|
security.pam.services.swaylock.text = ''
|
|
# Account management.
|
|
account required pam_unix.so
|
|
|
|
# Authentication management.
|
|
|
|
auth sufficient pam_unix.so nullok likeauth try_first_pass
|
|
auth sufficient ${pkgs.fprintd}/lib/security/pam_fprintd.so
|
|
auth required pam_deny.so
|
|
|
|
# Password management.
|
|
password sufficient pam_unix.so nullok sha512
|
|
|
|
# Session management.
|
|
session required pam_env.so conffile=/etc/pam/environment readenv=0
|
|
session required pam_unix.so
|
|
'';
|
|
}
|