From 7c2478b08e616b2f4155355cc128bd2fb1d879d1 Mon Sep 17 00:00:00 2001 From: bd Date: Mon, 3 Jun 2024 16:19:51 -0600 Subject: Segregate xorg services --- .config/guix/modules/base.scm | 40 +++++++++++++++++++++++++++++++++++++--- 1 file changed, 37 insertions(+), 3 deletions(-) (limited to '.config/guix/modules/base.scm') diff --git a/.config/guix/modules/base.scm b/.config/guix/modules/base.scm index c512ab6..c84a8de 100644 --- a/.config/guix/modules/base.scm +++ b/.config/guix/modules/base.scm @@ -21,7 +21,8 @@ bd-base-system-services bd-base-home-services)) -(use-service-modules base file-sharing +(use-service-modules admin avahi base + dbus desktop file-sharing networking ssh) (use-package-modules @@ -104,13 +105,47 @@ )) (define bd-base-system-services - `(,(service openssh-service-type + `( + ;; so that non-root users in the wheel group can + ;; perform administrative tasks (similar to "sudo"). + ,polkit-wheel-service + ;; The global fontconfig cache directory can sometimes contain + ;; stale entries, possibly referencing fonts that have been GC'd, + ;; so mount it read-only. + ,fontconfig-file-system-service + + ,(service network-manager-service-type) + ,(service wpa-supplicant-service-type) ; needed by NetworkManager + ,(service modem-manager-service-type) + ,(service usb-modeswitch-service-type) + + ;; The D-Bus clique. + ,(service avahi-service-type) + ,(service udisks-service-type) + ,(service upower-service-type) + ,(service accountsservice-service-type) + ,(service cups-pk-helper-service-type) + ,(service colord-service-type) + ,(service geoclue-service-type) + ,(service polkit-service-type) + ,(service elogind-service-type + (elogind-configuration + (handle-power-key 'hibernate) + ;; (idle-action-seconds (* 5 60)) + ;; (idle-action 'suspend) + )) + ,(service dbus-root-service-type) + + ,(service ntp-service-type) + + ,(service openssh-service-type (openssh-configuration (x11-forwarding? #t) (permit-root-login 'prohibit-password) (password-authentication? #f))) ,(service tor-service-type) ,(service transmission-daemon-service-type) + ,@%base-services)) (define bd-base-home-services @@ -124,7 +159,6 @@ (home-gpg-agent-configuration (pinentry-program (file-append pinentry "/bin/pinentry")) - (max-cache-ttl 43200) (ssh-support? #t))) (service home-bash-service-type -- cgit v1.2.3