4 files changed, 5 insertions, 9 deletions
diff --git a/files/etc/cron.d/invidious.invidious_server b/files/etc/cron.d/invidious.invidious_server
index a270600..ad35f3a 100644
--- a/files/etc/cron.d/invidious.invidious_server
+++ b/files/etc/cron.d/invidious.invidious_server
@@ -1,4 +1,4 @@
 MAILTO=root
 0  3 * * * root /usr/local/libexec/invidious-update           -q ${invidious_local_username} ${invidious_repo_dir}
 30 3 * * * root /usr/local/libexec/invidious-sighelper-update -q ${invidious_local_username} ${invidious_sighelper_repo_dir}
-0  4 * * * root /usr/sbin/service invidious restart > /dev/null
+0  4 * * * root service invidious status > /dev/null && service invidious restart > /dev/null
diff --git a/files/etc/pam.d/sddm.freebsd b/files/etc/pam.d/sddm.freebsd
index c222750..f1f61f8 100644
--- a/files/etc/pam.d/sddm.freebsd
+++ b/files/etc/pam.d/sddm.freebsd
@@ -5,7 +5,7 @@
 auth      sufficient  pam_self.so no_warn
 auth      required    /usr/local/lib/security/pam_krb5.so try_first_pass
 auth      optional    pam_exec.so /usr/local/libexec/pam-create-local-homedir
-auth      optional    pam_kwallet5.so
+auth      optional    pam_kwallet5.so kdehome=localdisk/.local/share
 
 account   requisite   pam_securetty.so
 account   required    pam_nologin.so
@@ -17,6 +17,6 @@ session   required    pam_lastlog.so no_fail
 session   required    pam_xdg.so no_fail
 session   required    /usr/local/lib/security/pam_krb5.so
 session   optional    /usr/local/lib/pam_mkhomedir.so mode=0700
-session   optional    pam_kwallet5.so auto_start
+session   optional    pam_kwallet5.so kdehome=localdisk/.local/share auto_start
 
 password  required    /usr/local/lib/security/pam_krb5.so try_first_pass
diff --git a/files/etc/profile.d/kde.sh.desktop b/files/etc/profile.d/kde.sh.desktop
index 010d5c1..55d0065 100644
--- a/files/etc/profile.d/kde.sh.desktop
+++ b/files/etc/profile.d/kde.sh.desktop
@@ -3,4 +3,6 @@
 if [ "$XDG_CURRENT_DESKTOP" = KDE ]; then
   export SSH_ASKPASS_REQUIRE=prefer
   export SSH_ASKPASS=/usr/local/bin/ksshaskpass
+  # https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=280638
+  export KWIN_SCREENSHOT_NO_PERMISSION_CHECKS=1
 fi
diff --git a/files/etc/profile.d/local-homedir.sh.common b/files/etc/profile.d/local-homedir.sh.common
index 170a966..2310d7c 100644
--- a/files/etc/profile.d/local-homedir.sh.common
+++ b/files/etc/profile.d/local-homedir.sh.common
@@ -23,9 +23,3 @@ ln -sfn "${LOCAL_HOME}/.mozilla" "${HOME}/.mozilla"
 # thunderbird
 mkdir -p "${LOCAL_HOME}/.thunderbird"
 ln -sfn "${LOCAL_HOME}/.thunderbird" "${HOME}/.thunderbird"
-
-# kwallet
-# The kwallet PAM module hard-codes ~/.local/share/kwalletd, but kwallet itself
-# honors XDG_DATA_HOME! So we symlink from the local disk back into NFS. Gross!
-mkdir -p "${LOCAL_HOME}/.local/share/kwalletd"
-ln -sfn "${HOME}/.local/share/kwalletd/kwallet.salt" "${LOCAL_HOME}/.local/share/kwalletd/kdewallet.salt"