nix: harmonize with julm-nix

[sourcephile-nix.git] / hosts / carotte / security.nix

diff --git a/hosts/carotte/security.nix b/hosts/carotte/security.nix
index bbd39fdaa1a353acf403379ffab997d55ac193e1..6d648337644ff8c3a84298de3f1406eff10c5678 100644 (file)
--- a/hosts/carotte/security.nix
+++ b/hosts/carotte/security.nix
@@ -3,15 +3,13 @@
 security.lockKernelModules = false;
 security.virtualisation.flushL1DataCache = lib.mkForce null;
 security.gnupg.agent = {
-  keyring."00B1DD47EA6B7BEF92FFEA66922C6249D6336C94" = {};
+  keyring."C7BCEA3D090956E7D51E94ADFF53191D9FA89552" = {
+    passwordGpg = "gnupg/root.gpg";
+    passwordFile = "/root/.gnupg.C7BCEA3D090956E7D51E94ADFF53191D9FA89552.txt";
+  };
 };
 services.openssh.extraConfig = ''
   # This is for removing remote gpg-agent's socket
   StreamLocalBindUnlink yes
 '';
-/*
-environment.systemPackages = [
-  pkgs.tshark
-];
-*/
 }