system/desktop
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

sandboxing

Browse source
This commit is contained in:
root 2026-07-18 11:45:31 -03:00
parent 5f70e8be94
commit 0f1a81c2aa
No known key found for this signature in database
13 changed files with 230 additions and 90 deletions
Download patch file Download diff file Expand all files Collapse all files

17
configuration.nix
View file

@ -15,9 +15,6 @@
path = "/root/.ssh/desktop";
mode = "0600";
};
sops.secrets."deepseek_api_key" = {
owner = "agent";
};
nix.settings.experimental-features = [
"nix-command"
"flakes"
@ -96,14 +93,16 @@
enable = true;
ports = [ 22 ];
settings = {
PasswordAuthentication = false;
KbdInteractiveAuthentication = false;
PasswordAuthentication = true;
KbdInteractiveAuthentication = true;
PermitRootLogin = "no";
AllowUsers = [
"user"
];
};
};
ratbagd.enable = true;
};
hardware = {
@ -171,10 +170,10 @@
};
systemd.tmpfiles.rules = [
"d /home/public 2775 root public - -"
"d /home/public/pictures 2775 root public - -"
"d /home/user/dev 0770 user users -"
"d /home/user/pictures 0750 user users -"
"a+ /home/public - - - - d:g:public:rwX,d:m::rwX"
"a+ /home/public/pictures - - - - d:g:public:rwX,d:m::rwX"
"a+ /home/user/dev - - - - d:g:users:rwX,d:m::rwX"
"a+ /home/user/pictures - - - - d:g:users:rwX,d:m::rwX"
];
}