From 367b0c114f38d5c332f5ee971ad13dd69e302dec Mon Sep 17 00:00:00 2001 From: tilpner Date: Mon, 15 Jun 2020 09:53:06 +0200 Subject: WIP towards module based configuration --- profiles/noPasswords.nix | 27 --------------------------- 1 file changed, 27 deletions(-) delete mode 100644 profiles/noPasswords.nix (limited to 'profiles/noPasswords.nix') diff --git a/profiles/noPasswords.nix b/profiles/noPasswords.nix deleted file mode 100644 index 9adceb7..0000000 --- a/profiles/noPasswords.nix +++ /dev/null @@ -1,27 +0,0 @@ -{ }: { - meta.description = '' - Prevent the user from storing any passwords in the browser. - This can be justified if the physical security of the device is uncertain, or - if the provider wants to avoid the responsiblity of storing such sensitive data. - - However, the users alternatives must be considered: what will a user do without the - password manager? - - Possible "alternatives" (from user perspective) include: - - Choose much weaker passwords - - Store the passwords in an unencrypted form (e.g. on the desktop) - ''; - - policies = { - # TODO: how exactly are passwords stored? - OfferToSaveLogins = false; - PasswordManagerEnabled = false; - }; - - preferences = { - # Ask for password every 15 minutes - security.ask_for_password = 2; - security.password_lifetime = 15; # minutes - signon.masterPasswordReprompt.timeout_ms = 15 * 60 * 1000; - }; -} -- cgit v1.2.3