jakalx/nixos-config
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

security: Move sudo configuration into module

Browse source
This commit is contained in:
Alexander Kobjolke 2024-03-11 21:42:19 +01:00
parent 8121d120e8
commit 6d33824dfc
3 changed files with 17 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

15
modules/sudo.nix Normal file
View file

@ -0,0 +1,15 @@
{ config, lib, pkgs, ... }:
{
config.security.sudo = {
enable = true;
execWheelOnly = true;
extraRules = [{
groups = [ "wheel" ];
commands = [{
command = "/run/current-system/sw/bin/nixos-rebuild";
options = [ "NOPASSWD" ];
}];
}];
};
}