security(EDITOR): by default, do not load neovim's user config

ryan4yin · Nov 25, 2024 · 102ec54 · 102ec54
1 parent cc44f41
commit 102ec54
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/home/base/tui/password-store/default.nix b/home/base/tui/password-store/default.nix
@@ -33,7 +33,7 @@ in {
         "C2A313F98166C942" # S - Ryan Yin (For pass & ssh only) <[email protected]>
       ];
       PASSWORD_STORE_CLIP_TIME = "60";
-      PASSWORD_STORE_GENERATED_LENGTH = "15";
+      PASSWORD_STORE_GENERATED_LENGTH = "12";
       PASSWORD_STORE_ENABLE_EXTENSIONS = "true";
     };
   };

diff --git a/modules/darwin/apps.nix b/modules/darwin/apps.nix
@@ -73,7 +73,8 @@ in {
       # Fix https://github.com/LnL7/nix-darwin/wiki/Terminfo-issues
       TERMINFO_DIRS = map (path: path + "/share/terminfo") config.environment.profiles ++ ["/usr/share/terminfo"];
 
-      EDITOR = "nvim";
+      # for security reasons, do not load neovim's user config
+      EDITOR = "nvim --clean";
     }
     # Set variables for you to manually install homebrew packages.
     // homebrew_mirror_env;