patate: physlock: remove service

[julm/julm-nix.git] / nixos / profiles / security.nix

diff --git a/nixos/profiles/security.nix b/nixos/profiles/security.nix
index a9cab5b38348334f7595ab9a2ee0bccf5433284c..1935b56dfa6ec9ba80a4651ed3b3601a19bc4af3 100644 (file)
--- a/nixos/profiles/security.nix
+++ b/nixos/profiles/security.nix
@@ -7,11 +7,17 @@ with lib;
   #boot.kernelPackages = pkgs.linuxPackages_latest_hardened;
   #environment.memoryAllocator.provider = "libc";
   nix.settings.allowed-users = [ "@users" ];
-  nix.settings.trusted-substituters = [
+  /*
+    nix.settings.substituters = [
     "https://nix-community.cachix.org"
-  ];
-  nix.settings.trusted-public-keys = [
-    "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
+    ];
+    nix.settings.trusted-public-keys = [
+    "nix-community.cachix.org:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
+    ];
+  */
+  nix.settings.trusted-users = [
+    "root"
+    "@wheel"
   ];
   networking.firewall.pingLimit = "--limit 60/minute --limit-burst 5";
   security.allowSimultaneousMultithreading = false;