disallow non-root users from using the nix daemon

2025-12-14 22:58:31 +01:00
parent 1034bf8ff2
commit d0a0ac85d1
2 changed files with 3 additions and 0 deletions
--- a/home-manager/firefox/config/browser-features.nix
+++ b/home-manager/firefox/config/browser-features.nix
@@ -128,4 +128,6 @@
  "browser.ping-centre.telemetry" = false;
  "devtools.onboarding.telemetry.logged" = false;
  "accessibility.force_disabled" = 1;
+  # Don't have speech-dispatcher (speechd) enabled, so this wont work
+  "media.webspeech.synth.enabled" = false;
 }
--- a/modules/nix/settings.nix
+++ b/modules/nix/settings.nix
@@ -25,6 +25,7 @@ in

    nix = {
      optimise.automatic = cfg.optimise;
+      settings.allowed-users = [ "root" "@wheel" ];
      settings.experimental-features = [
        "nix-command"
        "flakes"