{ waylock = { security.pam.services.waylock = { }; }; river = { programs.river.enable = true; }; }