cleanup

.gitignore

@@ -1,2 +1,2 @@
-
-laptop.qcow2
+kogami.qcow2
+ginoza.qcow2

kogami/configuration.nix

@@ -72,8 +72,9 @@
   # Basic programs to enable
   programs.kdeconnect.enable = true;
   programs.wireshark.enable = true;
+  programs.auto-cpufreq.enable = true;
 
-  services.twingate.enable = true;
+  #services.twingate.enable = true;
 
   # Allow unfree packages
   nixpkgs.config.allowUnfree = true;
@@ -81,14 +82,6 @@
   # List packages installed in system profile. To search, run:
   # $ nix search wget
 
-  # Some programs need SUID wrappers, can be configured further or are
-  # started in user sessions.
-  # programs.mtr.enable = true;
-  # programs.gnupg.agent = {
-  #   enable = true;
-  #   enableSSHSupport = true;
-  # };
-
   # List services that you want to enable:
 
   # Enable the OpenSSH daemon.

kogami/home.nix

@@ -1,4 +1,7 @@
-{userSettings, ...}: {
+{
+  userSettings,
+  ...
+}: {
   # Home manager configuration
   home.username = "${userSettings.username}";
   home.homeDirectory = "/home/${userSettings.username}";
@@ -83,6 +86,7 @@
       }
     '';
   };
+
   # Let Home Manager install and manage itself.
   programs.home-manager.enable = true;
 }

nixos/system/packages/sops/sops.nix

@@ -19,6 +19,12 @@
     };
 
     users.users.${userSettings.username}.hashedPasswordFile = "${config.sops.secrets."${userSettings.hostname}/password-hash".path}";
-    security.pam.yubico.id = ["${config.sops.secrets.yubikey_id}".value];
+    security.pam.yubico.id =
+      []
+      ++ (
+        if config.program.yubikey.enable
+        then ["${config.sops.secrets.yubikey_id}".value]
+        else []
+      );
   };
 }