45 lines
1.6 KiB
Nix
45 lines
1.6 KiB
Nix
{ pkgs, ... }:
|
|
with import <stockholm/lib>; #genid
|
|
{ # auto-mounting via polkit
|
|
services.udisks2.enable = true;
|
|
## automount all disks:
|
|
# services.devmon.enable = true;
|
|
# services.gnome3.gvfs.enable = true;
|
|
users.groups.storage = {
|
|
gid = genid "storage";
|
|
members = [ "makefu" ];
|
|
};
|
|
users.users.makefu.packages = with pkgs;[
|
|
gvfs pcmanfm lxmenu-data
|
|
];
|
|
environment.variables.GIO_EXTRA_MODULES = [ "${pkgs.gvfs}/lib/gio/modules" ];
|
|
|
|
## allow users in group "storage" to mount disk
|
|
# https://github.com/coldfix/udiskie/wiki/Permissions
|
|
security.polkit.extraConfig =
|
|
''
|
|
polkit.addRule(function(action, subject) {
|
|
var YES = polkit.Result.YES;
|
|
var permission = {
|
|
"org.freedesktop.udisks.filesystem-mount": YES,
|
|
"org.freedesktop.udisks.luks-unlock": YES,
|
|
"org.freedesktop.udisks.drive-eject": YES,
|
|
"org.freedesktop.udisks.drive-detach": YES,
|
|
"org.freedesktop.udisks2.filesystem-mount": YES,
|
|
"org.freedesktop.udisks2.encrypted-unlock": YES,
|
|
"org.freedesktop.udisks2.eject-media": YES,
|
|
"org.freedesktop.udisks2.power-off-drive": YES,
|
|
"org.freedesktop.udisks2.filesystem-mount-other-seat": YES,
|
|
"org.freedesktop.udisks2.filesystem-unmount-others": YES,
|
|
"org.freedesktop.udisks2.encrypted-unlock-other-seat": YES,
|
|
"org.freedesktop.udisks2.eject-media-other-seat": YES,
|
|
"org.freedesktop.udisks2.power-off-drive-other-seat": YES
|
|
};
|
|
if (subject.isInGroup("storage")) {
|
|
return permission[action.id];
|
|
}
|
|
});
|
|
'';
|
|
|
|
}
|