cert updates for work

kclejeune · Oct 2, 2024 · c210cad · c210cad
1 parent de6e327
commit c210cad
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 4 deletions.
diff --git a/modules/darwin/core.nix b/modules/darwin/core.nix
@@ -12,13 +12,14 @@
 
   # auto manage nixbld users with nix darwin
   nix = {
-    configureBuildUsers = true;
+    configureBuildUsers = false;
     nixPath = ["darwin=/etc/${config.environment.etc.darwin.target}"];
     extraOptions = ''
       extra-platforms = x86_64-darwin aarch64-darwin
     '';
   };
 
+  security.pam.enableSudoTouchIdAuth = true;
   # Auto upgrade nix package and the daemon service.
   services.nix-daemon.enable = true;
 

diff --git a/modules/home-manager/default.nix b/modules/home-manager/default.nix
@@ -64,9 +64,9 @@ in {
       coreutils-full
       curl
       d2
-      # devbox
       diffutils
       dive
+      dotenvx
       duckdb
       fd
       ffmpeg

diff --git a/modules/home-manager/dotfiles/aerospace/aerospace.toml b/modules/home-manager/dotfiles/aerospace/aerospace.toml
@@ -213,6 +213,10 @@ run = 'move-node-to-workspace D'
 if.app-id = 'com.docker.docker'
 run = 'move-node-to-workspace D'
 
+[[on-window-detected]]
+if.app-id = 'dev.kdrag0n.MacVirt'
+run = 'move-node-to-workspace D'
+
 # mnemonics F - files/finder
 [[on-window-detected]]
 if.app-id = 'com.apple.finder'

diff --git a/profiles/work.nix b/profiles/work.nix
@@ -1,5 +1,5 @@
-{pkgs, ...}: {
+{...}: {
   user.name = "lejeukc1";
   hm = {imports = [./home-manager/work.nix];};
-  security.pki.certificateFiles = ["${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt" "/etc/certs.d/bundle.pem"];
+  security.pki.installCACerts = false;
 }
-Original file line number
+Diff line change
@@ Expand Up / @@ -64,9 +64,9 @@ in { @@
           coreutils-full
           curl
           d2
-          # devbox
           diffutils
           dive
+          dotenvx
           duckdb
           fd
           ffmpeg
@@ Expand Down @@