alex/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: remove trusted-users escalation, restore comments, move man-db to core

Browse source 
- Remove alex from nix.settings.trusted-users in core.nix (was not in
  the original base.nix and widens attack surface by allowing arbitrary
  binary cache configuration without sudo)
- Restore useful comments in base.nix (zram explanation, earlyoom
  purpose, avahi/systemd-resolved notes)
- Move documentation.man.man-db.enable = false into core.nix so all
  hosts get it, remove redundant setting from wintermute and nightcity

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Alexander Wainwright 2026-04-11 11:21:56 +10:00
parent 4c5a639720
commit 265a299f24
4 changed files with 11 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

2
hosts/wintermute/configuration.nix
View file

@ -29,7 +29,5 @@
openFirewall = true;
};
documentation.man.man-db.enable = false;
system.stateVersion = "25.11";
}