From a8630322f77dbb7be4810099a42352b9278996a1 Mon Sep 17 00:00:00 2001
From: seth <getchoo@tuta.io>
Date: Sun, 1 Oct 2023 10:41:09 -0400
Subject: treewide!: flatten to parts/ layout

---
 parts/modules/nixos/base/security.nix | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 parts/modules/nixos/base/security.nix

(limited to 'parts/modules/nixos/base/security.nix')

diff --git a/parts/modules/nixos/base/security.nix b/parts/modules/nixos/base/security.nix
new file mode 100644
index 0000000..e13d1c7
--- /dev/null
+++ b/parts/modules/nixos/base/security.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  pkgs,
+  ...
+}: let
+  inherit (lib) mkDefault;
+in {
+  security = {
+    apparmor.enable = mkDefault true;
+    audit.enable = mkDefault true;
+    auditd.enable = mkDefault true;
+    polkit.enable = mkDefault true;
+    rtkit.enable = mkDefault true;
+    sudo.execWheelOnly = true;
+  };
+
+  services.dbus.apparmor = mkDefault "enabled";
+
+  users = {
+    defaultUserShell = pkgs.bash;
+    mutableUsers = false;
+  };
+
+  nix.settings = {
+    trusted-users = ["root" "@wheel"];
+  };
+}
-- 
cgit v1.2.3