blob: c87df3ff754c30e9c4c233fab77482e4f17c8bc6 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
|
{ config, pkgs, ... }:
{
imports = [ ./general-intel.nix ];
# TPM chip countains a RNG
security.rngd.enable = true;
boot = {
kernelModules = [ "tp_smapi" ];
extraModulePackages = [ config.boot.kernelPackages.tp_smapi ];
};
# hard disk protection if the laptop falls
services.hdapsd.enable = true;
# fingerprint reader: login and unlock with fingerprint (if you add one with `fprintd-enroll`)
#services.fprintd.enable = true;
#security.pam.services.login.fprintAuth = true;
#security.pam.services.xscreensaver.fprintAuth = true;
# similarly for other PAM providers
}
|