changes to user seciurity
Some checks failed
update-flake-lock / update_lockfile (push) Failing after 24m24s
Some checks failed
update-flake-lock / update_lockfile (push) Failing after 24m24s
This commit is contained in:
parent
c03715b7ad
commit
e6e1336487
@ -27,7 +27,7 @@
|
|||||||
})
|
})
|
||||||
];
|
];
|
||||||
|
|
||||||
security.sudo.wheelNeedsPassword = false;
|
security.sudo.needsPassword = false;
|
||||||
|
|
||||||
users.groups.wyatt = {};
|
users.groups.wyatt = {};
|
||||||
|
|
||||||
|
@ -6,7 +6,7 @@
|
|||||||
with lib; {
|
with lib; {
|
||||||
options = {
|
options = {
|
||||||
security.sudo = {
|
security.sudo = {
|
||||||
wheelNeedsPassword = mkOption {
|
needsPassword = mkOption {
|
||||||
type = types.bool;
|
type = types.bool;
|
||||||
default = true;
|
default = true;
|
||||||
description = "Whether users in the wheel group need to provide a password for sudo.";
|
description = "Whether users in the wheel group need to provide a password for sudo.";
|
||||||
@ -15,7 +15,7 @@ with lib; {
|
|||||||
};
|
};
|
||||||
|
|
||||||
config = {
|
config = {
|
||||||
environment.etc."sudoers.d/wheel-no-password" = mkIf (!config.security.sudo.wheelNeedsPassword) {
|
environment.etc."sudoers.d/wheel-no-password" = mkIf (!config.security.sudo.needsPassword) {
|
||||||
text = ''
|
text = ''
|
||||||
%wheel ALL=(ALL) NOPASSWD: ALL
|
%wheel ALL=(ALL) NOPASSWD: ALL
|
||||||
'';
|
'';
|
||||||
|
Loading…
x
Reference in New Issue
Block a user