imports = [
../nixos/profiles/graphical.nix
../nixos/profiles/lang-fr.nix
+ ../nixos/profiles/laptop.nix
../nixos/profiles/printing.nix
courge/backup.nix
courge/hardware.nix
];
# Lower kernel's security for better performances
- boot.kernelParams = [ "mitigations=off" ];
+ security.kernel.mitigations = "off";
home-manager.users.mo = {
imports = [ ../homes/mo.nix ];
};
- systemd.services.home-manager-mo.postStart = ''
- ${pkgs.nix}/bin/nix-env --delete-generations +1 --profile /nix/var/nix/profiles/per-user/mo/home-manager
- '';
users.users.root = {
openssh.authorizedKeys.keys = map lib.readFile [
../users/julm/ssh/oignon.pub
uid = 1000;
# Put the hashedPassword in /nix/store,
# though /etc/shadow is not world readable...
- # printf %s $(mkpasswd -m md5crypt)
- hashedPassword = lib.readFile oignon/users/mo/login/hashedPassword.clear;
+ # printf %s $(mkpasswd -m yescrypt)
+ hashedPassword = lib.readFile courge/users/mo/login/hashedPassword.clear;
extraGroups = [
"adbusers"
"dialout"
"video"
"wheel"
#"ipfs"
- config.services.davfs2.davGroup
+ #config.services.davfs2.davGroup
#"vboxusers"
];
# If created, zfs-mount.service would require:
#programs.fuse.userAllowOther = true;
- services.physlock = {
- enable = true;
- allowAnyUser = true;
- # NOTE: xfconf-query -c xfce4-session -p /general/LockCommand -s "physlock" --create -t string
- };
-
services.xserver = {
desktopManager = {
- mate.enable = true;
- xfce.enable = false;
- xterm.enable = false;
+ gnome.enable = true;
};
displayManager = {
- defaultSession = "mate";
- autoLogin = {
- user = config.users.users.mo.name;
- };
+ gdm.enable = true;
+ };
+ };
+
+ services.displayManager = {
+ defaultSession = "gnome";
+ autoLogin = {
+ user = config.users.users.mo.name;
};
};