hosts/losurdo/security.nix

   1 { inputs, pkgs, lib, config, ... }:
   2 {
   3 security.lockKernelModules = false;
   4 security.gnupg.agent = {
   5   keyring."9AA84E6F6D71F9163C46BF396B141A0806219077" = {};
   6 };
   7 services.openssh.extraConfig = ''
   8   # This is for removing remote gpg-agent's socket
   9   StreamLocalBindUnlink yes
  10 '';
  11 }