task | add support for systemd-lock-handler

home/gui/default.nix

@@ -63,6 +63,7 @@ in {
         signal-desktop
         simple-scan
         syncthingtray
+        systemd-lock-handler
         telegram-desktop
         texlive.combined.scheme-medium
         watchmate

hosts/workstation/systemd.nix

@@ -5,6 +5,7 @@ let
 in {
   systemd = {
     services = {
+      systemd-lock-handler = { enable = true; };
       NetworkManager-wait-online.enable = lib.mkForce false;
       systemd-networkd-wait-online.enable = lib.mkForce false;
       clean-keychain = {
@@ -18,6 +19,21 @@ in {
     };
     user = {
       services = {
+        swaylock = {
+          description = "Screen locker for Wayland";
+          documentation = ["man:swaylock(1)"];
+          onSuccess = ["unlock.target"];
+          partOf = ["lock.target"];
+          before = ["lock.target"];
+          wantedBy = ["lock.target"];
+          serviceConfig = {
+            Type = "forking";
+            Environment = "PATH=/run/current-system/sw/bin:/etc/profiles/per-user/don/bin:/home/don/bin";
+            ExecStart = "/home/don/bin/lock.sh -m";
+            Restart = "on-failure";
+            RestartSec = 0;
+          };
+        };
         detect-reboot-for-upgrade = {
           script = ''
             set -eu -o pipefail