mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-09-11 20:32:04 +02:00
fix(security): tighten desktop remote access
This commit is contained in:
@@ -12,6 +12,7 @@ in
|
||||
createsVirtualDisplay = lib.hasInfix "options vkms create_default_dev=1" cfg.boot.extraModprobeConfig;
|
||||
niriUsesIntelRenderer = lib.hasInfix "/dev/dri/by-path/pci-0000:00:02.0-render" niriHardware;
|
||||
sunshineUserHasInputAccess = builtins.elem "input" cfg.users.users.ryan.extraGroups;
|
||||
sunshineHasSysAdmin = cfg.services.sunshine.capSysAdmin;
|
||||
sunshineStartsAfterNiri = builtins.elem "niri.service" cfg.systemd.user.services.sunshine.after;
|
||||
sunshineWaitsForNiriOutput = lib.hasInfix "niri msg outputs" cfg.systemd.user.services.sunshine.preStart;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user