nixos-config/system/security/doas.nix
2024-09-18 20:32:54 -05:00

24 lines
449 B
Nix

{ userSettings, pkgs, ... }:
{
# Doas instead of sudo
security.doas.enable = true;
security.sudo.enable = false;
security.doas.extraRules = [
{
users = [ "${userSettings.username}" ];
keepEnv = true;
persist = true;
}
{
users = [ "${userSettings.username}" ];
cmd = "tee";
noPass = true;
}
];
environment.systemPackages = [
(pkgs.writeScriptBin "sudo" ''exec doas "$@"'')
];
}