jsw/NiksOS
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: jsw:876c9ee88de2761b2a3606b8ab4ecfaa131e0b81
Branches Tags
jsw:master
jsw:derek-site
..
compare: jsw:f74e384eaddb5f233485c723fa01460e60c715c2
Branches Tags
jsw:derek-site
jsw:master

1 commit
876c9ee88d ... f74e384ead

Author SHA1 Message Date
Jurn Wubben
f74e384ead Started on implementing derek's site 2025-09-30 18:48:03 +02:00
2 changed files with 1 additions and 31 deletions
Download patch file Download diff file Expand all files Collapse all files

BIN
secrets/derek-bot.age
View file

Binary file not shown.

32
system/server/derek-bot.nix
View file

@ -76,37 +76,7 @@ in {
users.groups.${userGroup} = {};
users.users.${userGroup} = {
group = userGroup;
isNormalUser = true;
home = "/home/${userGroup}";
isSystemUser = true;
};
security.polkit.extraConfig = ''
polkit.addRule(function(action, subject) {
polkit.log("Rule triggered. Action: " + action.id + " Unit: " + action.lookup("unit") + " User: " + subject.user);
// For journalctl access
if ((action.id == "org.freedesktop.systemd1.manage-units" ||
action.id == "org.freedesktop.systemd1.unit-journal") &&
action.lookup("unit") == "${userGroup}.service" &&
subject.user == "${userGroup}") {
polkit.log("ALLOWING access for " + subject.user);
return polkit.Result.YES;
}
});
polkit.addRule(function(action, subject) {
if (
subject.user == "${userGroup}" &&
(
action.id == "org.freedesktop.login1.power-off" ||
action.id == "org.freedesktop.login1.power-off-ignore-inhibit" ||
action.id == "org.freedesktop.login1.power-off-multiple-sessions" ||
action.id == "org.freedesktop.login1.reboot" ||
action.id == "org.freedesktop.login1.reboot-ignore-inhibit" ||
action.id == "org.freedesktop.login1.reboot-multiple-sessions"
)
) {
return polkit.Result.NO;
}
});
'';
};
}