baduhai/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

move podmand security options to podman aspect

Browse source
This commit is contained in:
William 2026-02-07 09:33:55 -03:00
parent d83172f487
commit c6fbd21009
2 changed files with 23 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

9
aspects/common/security.nix
View file

@ -1,14 +1,13 @@
{ ... }:
{
flake.modules.nixos.common-security = { ... }: {
security = {
unprivilegedUsernsClone = true; # Needed for rootless podman
sudo = {
flake.modules.nixos.common-security =
{ ... }:
{
security.sudo = {
wheelNeedsPassword = false;
extraConfig = ''
Defaults lecture = never
'';
};
};
};
}

29
aspects/podman.nix
View file

@ -1,15 +1,24 @@
{ ... }:
{
flake.modules.nixos.podman = { config, lib, pkgs, ... }: {
virtualisation.podman = {
enable = true;
autoPrune.enable = true;
extraPackages = [ pkgs.podman-compose ];
};
flake.modules.nixos.podman =
{
config,
lib,
pkgs,
...
}:
{
virtualisation.podman = {
enable = true;
autoPrune.enable = true;
extraPackages = [ pkgs.podman-compose ];
};
systemd = {
services.podman-auto-update.enable = true;
timers.podman-auto-update.enable = true;
security.unprivilegedUsernsClone = true; # Needed for rootless podman
systemd = {
services.podman-auto-update.enable = true;
timers.podman-auto-update.enable = true;
};
};
};
}