framework-2024-11-21-16-16-17

configs/common.nix

@@ -10,10 +10,8 @@
       useTmpfs = lib.mkDefault true;
       cleanOnBoot = true;
     };
-    # kernelParams = [ "quiet" ];
     consoleLogLevel = 0;
     kernel.sysctl = {"vm.max_map_count" = 262144;};
-    # initrd.systemd.enable = (!config.boot.swraid.enable && !config.boot.isContainer);
   };
 
   # Work around for https://github.com/NixOS/nixpkgs/issues/124215
@@ -195,6 +193,7 @@
     vnstat.enable = true;
     tuptime.enable = true;
     locate.enable = true;
+    tailscale.enable = true;
 
     openssh = {
       enable = true;
@@ -279,4 +278,12 @@
       fi
     '';
   };
+
+  # Turn off sudo lecture
+  security = {
+    sudo.extraConfig = ''
+      # rollback results in sudo lectures after each reboot
+      Defaults lecture = never
+    '';
+  };
 }

machine/desktop/configuration.nix

@@ -282,8 +282,6 @@ in {
     #   group = "users";
     # };
 
-    tailscale.enable = true;
-
     borgbackup.jobs = {
       home = rec {
         compression = "auto,zstd";
@@ -307,21 +305,6 @@ in {
     };
   };
 
-  security = {
-    # rtkit.enable = true;
-    # apparmor.enable = true;
-
-    # auditd.enable = true;
-    # audit.enable = true;
-    # audit.rules = [
-    #   "-a exit,always -F arch=b64 -S execve"
-    # ];
-
-    sudo.extraConfig = ''
-      # rollback results in sudo lectures after each reboot
-      Defaults lecture = never
-    '';
-  };
 
   system.stateVersion = "24.11";
 }

machine/framework/configuration.nix

@@ -209,7 +209,6 @@ in {
     power-profiles-daemon.enable = true;
     colord.enable = true;
     fprintd.enable = false;
-    tailscale.enable = true;
 
     btrfs.autoScrub = {
       enable = true;