# Configuration common to all my servers { config, pkgs, lib, ... }: { imports = [ ../profiles/openssh.nix ../secrets/user-craige.nix ../secrets/user-root.nix ]; programs.mosh = { enable = true; withUtempter = true; }; security.polkit.enable = false; # avoid CVE-2021-4034 (PwnKit) services.udisks2.enable = false; # disable udisks2 which enables polkit }