users/clerie: Assign dedicated group

configuration/desktop/default.nix

@@ -7,6 +7,7 @@
     ./gnome.nix
     ./inputs.nix
     ./networking.nix
+    ./polkit.nix
     ./power.nix
     ./printing.nix
     ./ssh.nix

configuration/desktop/polkit.nix

@@ -0,0 +1,7 @@
+{ ... }:
+
+{
+
+  security.polkit.enable = true;
+
+}

configuration/gpg-ssh/default.nix

@@ -19,6 +19,21 @@
 
   services.pcscd.enable = true;
 
+  # pcscd sometimes breaks and seem to need a manual restart
+  # so we allow users to restart that service themself
+  security.polkit.extraConfig = ''
+    polkit.addRule(function(action, subject) {
+        if (
+            action.id == "org.freedesktop.systemd1.manage-units"
+            && action.lookup("unit") == "pcscd.service"
+            && action.lookup("verb") == "restart"
+            && subject.isInGroup("users")
+        ) {
+            return polkit.Result.YES;
+        }
+    });
+  '';
+
   services.udev.packages = with pkgs; [
     yubikey-personalization
   ];

users/clerie/default.nix

@@ -3,7 +3,9 @@
 {
   users.users.clerie = {
     isNormalUser = true;
+    group = "clerie";
     extraGroups = [
+      "users"
       "wheel"
       "dialout"
     ];
@@ -13,4 +15,6 @@
       "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnUBblmmVoMMBftn4EnwnzqR12m9zill51LpO124hHb10K2rqxNoq8tYSc2pMkV/3briZovffpe5SzB+m2MnXbtOBstIEXkrPZQ78vaZ/nLh7+eWg30lCmMPwjf2wIjlTXkcbxbsi7FbPW7FsolGkU/0mqGhqK1Xft/g7SnCXIoGPSSrHMXEv5dPPofCa1Z0Un+98wQTVfOSKek6TnIsfLbG01UFQVkN7afE4dqSmMiWwEm2PK9l+OiBA2/QzDpbtu9wsfTol4c192vFEWR9crB2YZ1JlMbjVWHjYmB7NFsS0A6lUOikss0Y+LUWS2/QuM/kqybSo4rasZMAIazM6D clerie"
     ];
   };
+
+  users.groups.clerie = {};
 }