diff options
author | Kjetil Orbekk <kj@orbekk.com> | 2022-09-03 17:17:39 -0400 |
---|---|---|
committer | Kjetil Orbekk <kj@orbekk.com> | 2022-11-25 08:34:23 -0500 |
commit | 0cf00b221106c22de234b814ef404b8193969e10 (patch) | |
tree | 4693f143f9df2506611db79b9a2e8c53a998f42e /machines | |
parent | 866dec7689457c204540a9143bdcdbbe3e32f130 (diff) |
update gpg setup on minideck
Diffstat (limited to 'machines')
-rw-r--r-- | machines/minideck.nix | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/machines/minideck.nix b/machines/minideck.nix index fba0e73..404f3f4 100644 --- a/machines/minideck.nix +++ b/machines/minideck.nix @@ -10,6 +10,21 @@ with lib; services.xserver.enable = mkForce false; services.xserver.displayManager.lightdm.enable = mkForce false; + # Fake pipewire socket activation. + services.pipewire.socketActivation = false; + systemd.user.services.pipewire-setup = { + description = "Link pipewire socket"; + after = ["paths.target"]; + wantedBy = ["default.target"]; + serviceConfig = { + ExecStart = "${pkgs.coreutils}/bin/ln -s /tmp/pipewire-0 %t/pipewire-0"; + Type = "oneshot"; + }; + }; + + # GPG socket is forwarded by SSH. + systemd.user.sockets.gpg-agent.enable = mkForce false; + nix.gc.persistent = false; boot.cleanTmpDir = mkForce false; # Don't delete bind mounts in /tmp. |