added sudoers file, imported to common users
This commit is contained in:
25
modules/security/sudo.nix
Normal file
25
modules/security/sudo.nix
Normal file
@ -0,0 +1,25 @@
|
||||
{
|
||||
config,
|
||||
lib,
|
||||
...
|
||||
}:
|
||||
with lib; {
|
||||
options = {
|
||||
security.sudo = {
|
||||
wheelNeedsPassword = mkOption {
|
||||
type = types.bool;
|
||||
default = true;
|
||||
description = "Whether users in the wheel group need to provide a password for sudo.";
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
config = {
|
||||
environment.etc."sudoers.d/wheel-no-password" = mkIf (!config.security.sudo.wheelNeedsPassword) {
|
||||
text = ''
|
||||
%wheel ALL=(ALL) NOPASSWD: ALL
|
||||
'';
|
||||
# mode = "0440";
|
||||
};
|
||||
};
|
||||
}
|
Reference in New Issue
Block a user