blob: 3a9e99b4b344935a62e71a2220db2a1e3862d24a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
|
{ config, pkgs, ... }:
{
imports = [ ../intel.nix ];
# TPM chip countains a RNG
security.rngd.enable = true;
boot = {
kernelModules = [ "tp_smapi" ];
extraModulePackages = with config.boot.kernelPackages; [ tp_smapi ];
};
# hard disk protection if the laptop falls
services.hdapsd.enable = true;
# fingerprint reader: login and unlock with fingerprint (if you add one with `fprintd-enroll`)
#services.fprintd.enable = true;
#security.pam.services.login.fprintAuth = true;
#security.pam.services.xscreensaver.fprintAuth = true;
# similarly for other PAM providers
}
|