gistfile1.txt

  security = {
    pam = {
      loginLimits = [
        {
          domain = "clever";
          item = "nofile";
          type = "hard";
          value = "65535";
        }
      ];
      services.hsdm = { allowNullPassword = true; startSession = true; };
    };
    audit = {
      enable = false;
    };
  };