hosts/losurdo/security.nix

   1 { inputs, pkgs, lib, config, ... }:
   2 {
   3 security.lockKernelModules = false;
   4 security.gnupg.agent = {
   5   keyring."9AA84E6F6D71F9163C46BF396B141A0806219077" = {
   6     passwordGpg = "gnupg/root.gpg";
   7   };
   8 };
   9 services.openssh.extraConfig = ''
  10   # This is for removing remote gpg-agent's socket
  11   StreamLocalBindUnlink yes
  12 '';
  13 environment.systemPackages = [
  14   pkgs.tshark
  15 ];
  16 }