Grimmauld/grimm-nixos-laptop
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

update and clean /var

Browse source
This commit is contained in:
Grimmauld 2025-01-12 19:10:42 +01:00
parent dbbe60d0d2
commit c76eaacb28
No known key found for this signature in database
4 changed files with 8 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
flake.lock
View file

@ -507,11 +507,11 @@
}, },
"nixpkgs": { "nixpkgs": {
"locked": { "locked": {
"lastModified": 1736344531, "lastModified": 1736523798,
"narHash": "sha256-8YVQ9ZbSfuUk2bUf2KRj60NRraLPKPS0Q4QFTbc+c2c=", "narHash": "sha256-Xb8mke6UCYjge9kPR9o4P1nVrhk7QBbKv3xQ9cj7h2s=",
"owner": "NixOS", "owner": "NixOS",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "bffc22eb12172e6db3c5dde9e3e5628f8e3e7912", "rev": "130595eba61081acde9001f43de3248d8888ac4a",
"type": "github" "type": "github"
}, },
"original": { "original": {

2
flake.nix
View file

@ -115,7 +115,7 @@
grimm-nixos-ssd = customNixosSystem "x86_64-linux" { grimm-nixos-ssd = customNixosSystem "x86_64-linux" {
modules = [ modules = [
agenix.nixosModules.default agenix.nixosModules.default
chaotic.nixosModules.default # chaotic.nixosModules.default
aagl-gtk-on-nix.nixosModules.default aagl-gtk-on-nix.nixosModules.default
./configuration.nix ./configuration.nix
aa-alias-manager.nixosModules.default aa-alias-manager.nixosModules.default

2
hardening/default.nix
View file

@ -14,6 +14,6 @@
systemd.tpm2.enable = false; systemd.tpm2.enable = false;
systemd.enableEmergencyMode = false; systemd.enableEmergencyMode = false;
virtualisation.vswitch.enable = false; virtualisation.vswitch.enable = false;
services.resolved.enable = false; # services.resolved.enable = false;
security.unprivilegedUsernsClone = true; security.unprivilegedUsernsClone = true;
} }

3
specific/grimm-nixos-ssd/hardware-configuration.nix
View file

@ -180,6 +180,9 @@ in
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
"D! ${nix_build} 0755 root root" "D! ${nix_build} 0755 root root"
"D! /var/cache 0755 root root"
"D! /var/.Trash-0 0755 root root"
"D! /var/tmp 0755 root root"
# "D! /root 0700 root root" # "D! /root 0700 root root"
]; ];
systemd.services.nix-daemon.environment.TMPDIR = nix_build; systemd.services.nix-daemon.environment.TMPDIR = nix_build;