feat: better polkit config

Suya1671 · May 31, 2024 · 1fb31bc · 1fb31bc
1 parent fda48f0
commit 1fb31bc
Show file tree

Hide file tree

Showing 6 changed files with 97 additions and 69 deletions.
diff --git a/flake.lock b/flake.lock
diff --git a/systems/GAMER-PC/config.nix b/systems/GAMER-PC/config.nix
@@ -26,10 +26,6 @@
       glib-networking.enable = true;
     };
 
-    udev.packages = with pkgs; [
-      gnome.gnome-settings-daemon
-    ];
-
     openssh = {
       enable = true;
       # require public key authentication for better security

diff --git a/systems/GAMER-PC/hardware.nix b/systems/GAMER-PC/hardware.nix
@@ -32,6 +32,11 @@
     fsType = "vfat";
   };
 
+  fileSystems."/mnt/BulkStorage" = {
+    device = "/dev/disk/by-uuid/36F2637DF263406B";
+    fsType = "ntfs";
+  };
+
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's
   # still possible to use this option, but it's recommended to use it in conjunction

diff --git a/systems/modules/core/security.nix b/systems/modules/core/security.nix
@@ -1,4 +1,4 @@
-{...}: {
+{pkgs, ...}: {
   security.pam.loginLimits = [
     # Unlimited amount of processes for root
     {
@@ -13,4 +13,31 @@
       value = "unlimited";
     }
   ];
+
+  security.polkit.enable = true;
+
+  systemd = {
+    user.services.polkit-gnome-authentication-agent-1 = {
+      description = "polkit-gnome-authentication-agent-1";
+      wantedBy = [ "graphical-session.target" ];
+      wants = [ "graphical-session.target" ];
+      after = [ "graphical-session.target" ];
+      serviceConfig = {
+          Type = "simple";
+          ExecStart = "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1";
+          Restart = "on-failure";
+          RestartSec = 1;
+          TimeoutStopSec = 10;
+        };
+    };
+  };
+
+  services.udev.packages = with pkgs; [
+    gnome.gnome-settings-daemon
+    qmk-udev-rules
+    vial
+  ];
+
+  # add nushell to list of valid shells
+  environment.shells = [ pkgs.nushell ];
 }
diff --git a/systems/modules/niri.nix b/systems/modules/niri.nix
@@ -6,6 +6,6 @@
     enable = true;
     package = pkgs.niri-unstable;
   };
-
+  systemd.user.services.niri-flake-polkit.enable = false;
   services.gnome.sushi.enable = true;
 }
diff --git a/users/modules/helix/default.nix b/users/modules/helix/default.nix
@@ -14,28 +14,28 @@
       "ui.virtual.inlay-hint.type" = { fg = "base04"; };
       "ui.virtual.jump-label" = { fg = "base0F"; };
     };
-    languages = {
-      language-server.copilot = {
-        command = "${pkgs.helix-gpt}/bin/helix-gpt --handler copilot --copilotKey $(cat /run/secrets/copilot/key)";
-      };
+    # languages = {
+    #   language-server.copilot = {
+    #     command = "${pkgs.helix-gpt}/bin/helix-gpt --handler copilot --copilotKey $(cat /run/secrets/copilot/key)";
+    #   };
 
-      language = [
-        {
-          name = "rust";
-          language-servers = [
-            "rust-analyzer"
-            "copilot"
-          ];
-        }
-        {
-          name = "typescript";
-          language-servers = [
-            "typescript-language-server"
-            "copilot"
-          ];
-        }
-      ];
-    };
+    #   language = [
+    #     {
+    #       name = "rust";
+    #       language-servers = [
+    #         "rust-analyzer"
+    #         "copilot"
+    #       ];
+    #     }
+    #     {
+    #       name = "typescript";
+    #       language-servers = [
+    #         "typescript-language-server"
+    #         "copilot"
+    #       ];
+    #     }
+    #   ];
+    # };
     settings = {
       theme = lib.mkForce "stylix-edit";
       editor = {