42 lines
1.3 KiB
Nix
42 lines
1.3 KiB
Nix
{ ... }:
|
|
let
|
|
# N.B.: systemd doesn't like to honor its timeout settings.
|
|
# a timeout of 20s is actually closer to 70s,
|
|
# because it allows 20s, then after the 20s passes decides to allow 40s, then 60s,
|
|
# finally it peacefully kills stuff, and then 10s later actually kills shit.
|
|
haltTimeout = 10;
|
|
in
|
|
{
|
|
systemd.extraConfig = ''
|
|
# DefaultTimeoutStopSec defaults to 90s, and frequently blocks overall system shutdown.
|
|
DefaultTimeoutStopSec=${builtins.toString haltTimeout}
|
|
'';
|
|
|
|
services.journald.extraConfig = ''
|
|
# docs: `man journald.conf`
|
|
# merged journald config is deployed to /etc/systemd/journald.conf
|
|
[Journal]
|
|
# disable journal compression because the underlying fs is compressed
|
|
Compress=no
|
|
'';
|
|
|
|
# allow ordinary users to `reboot` or `shutdown`.
|
|
# source: <https://nixos.wiki/wiki/Polkit>
|
|
security.polkit.extraConfig = ''
|
|
polkit.addRule(function(action, subject) {
|
|
if (
|
|
subject.isInGroup("users")
|
|
&& (
|
|
action.id == "org.freedesktop.login1.reboot" ||
|
|
action.id == "org.freedesktop.login1.reboot-multiple-sessions" ||
|
|
action.id == "org.freedesktop.login1.power-off" ||
|
|
action.id == "org.freedesktop.login1.power-off-multiple-sessions"
|
|
)
|
|
)
|
|
{
|
|
return polkit.Result.YES;
|
|
}
|
|
})
|
|
'';
|
|
}
|