1
0
Fork 0
mirror of https://git.sr.ht/~neverness/ultima synced 2025-01-08 18:33:52 +00:00
ultima/modules/nixos/hardware/security/default.nix

30 lines
654 B
Nix
Raw Normal View History

2024-11-21 09:24:15 +00:00
{ pkgs, lib, config, userName, True, False, ... }:
with lib;
let cfg = config.module.hardware.security;
in {
options = { module.hardware.security = { enable = mkEnableOption ""; }; };
config = mkIf cfg.enable {
2024-12-06 12:57:22 +00:00
security.sudo-rs = {
execWheelOnly = true;
wheelNeedsPassword = true;
extraRules = [{
users = [ userName ];
commands = with pkgs; [
{
command = "${light}/bin/light";
options = [ "NOPASSWD" ];
}
{
command = "${uutils-coreutils-noprefix}/bin/tee";
options = [ "NOPASSWD" ];
}
];
}];
2024-11-21 09:24:15 +00:00
};
};
}