]> Git — Sourcephile - sourcephile-nix.git/blob - hosts/losurdo/security.nix
losurdo: nix-serve: enable over wireguard
[sourcephile-nix.git] / hosts / losurdo / security.nix
1 { inputs, pkgs, lib, config, ... }:
2 {
3 security.lockKernelModules = false;
4 security.gnupg.agent = {
5 keyring."9AA84E6F6D71F9163C46BF396B141A0806219077" = {};
6 };
7 services.openssh.extraConfig = ''
8 # This is for removing remote gpg-agent's socket
9 StreamLocalBindUnlink yes
10 '';
11 environment.systemPackages = [
12 pkgs.tshark
13 ];
14 }