···

       
11
       
11
       
 
       
    security.lockKernelModules = mkOption {

     

       
12
       
12
       
 
       
      type = types.bool;

     

       
13
       
13
       
 
       
      default = false;

     

       
14
       
14
       
-
       
      description = ''

     

       
14
       
14
       
+
       
      description = lib.mdDoc ''

     

       
15
       
15
       
 
       
        Disable kernel module loading once the system is fully initialised.

     

       
16
       
16
       
 
       
        Module loading is disabled until the next reboot. Problems caused

     

       
17
       
17
       
 
       
        by delayed module loading can be fixed by adding the module(s) in

     

       
18
       
18
       
-
       
        question to <option>boot.kernelModules</option>.

     

       
18
       
18
       
+
       
        question to {option}`boot.kernelModules`.

     

       
19
       
19
       
 
       
      '';

     

       
20
       
20
       
 
       
    };

     

       
21
       
21
       
 
       
  };

     

···

       
29
       
29
       
 
       
            if (subject.local) return "yes";

     

       
30
       
30
       
 
       
          });

     

       
31
       
31
       
 
       
        '';

     

       
32
       
32
       
-
       
      description =

     

       
32
       
32
       
+
       
      description = lib.mdDoc

     

       
33
       
33
       
 
       
        ''

     

       
34
       
34
       
 
       
          Any polkit rules to be added to config (in JavaScript ;-). See:

     

       
35
       
35
       
 
       
          http://www.freedesktop.org/software/polkit/docs/latest/polkit.8.html#polkit-rules

     
···

       
40
       
40
       
 
       
      type = types.listOf types.str;

     

       
41
       
41
       
 
       
      default = [ "unix-group:wheel" ];

     

       
42
       
42
       
 
       
      example = [ "unix-user:alice" "unix-group:admin" ];

     

       
43
       
43
       
-
       
      description =

     

       
43
       
43
       
+
       
      description = lib.mdDoc

     

       
44
       
44
       
 
       
        ''

     

       
45
       
45
       
 
       
          Specifies which users are considered “administrators”, for those

     

       
46
       
46
       
 
       
          actions that require the user to authenticate as an

     

       
47
       
47
       
-
       
          administrator (i.e. have an <literal>auth_admin</literal>

     

       
48
       
48
       
-
       
          value).  By default, this is all users in the <literal>wheel</literal> group.

     

       
47
       
47
       
+
       
          administrator (i.e. have an `auth_admin`

     

       
48
       
48
       
+
       
          value).  By default, this is all users in the `wheel` group.

     

       
49
       
49
       
 
       
        '';

     

       
50
       
50
       
 
       
    };

     

       
51
       
51