rrvsh/pantheon
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(nixos): add sudo module and refactor user options

Browse source
This commit is contained in:
Mohammad Rafiq 2025-07-07 19:30:04 +08:00
parent 03fca8b28b
commit aa06b5f6fd
No known key found for this signature in database
2 changed files with 13 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

11
nix/modules/system/sudo.nix Normal file
View file

@ -0,0 +1,11 @@
{ config, ... }:
let
cfg = config.flake;
in
{
flake.modules.nixos.default = {
security.sudo.wheelNeedsPassword = false;
nix.settings.trusted-users = [ "@wheel" ];
users.users.${cfg.admin.username}.extraGroups = [ "wheel" ];
};
}

10
nix/modules/system/users.nix
View file

@ -1,26 +1,20 @@
{ config, lib, ... }:
{ config, ... }:
let
cfg = config.flake;
inherit (cfg.lib.modules) userListToAttrs forAllUsers';
inherit (lib.lists) optional;
in
{
flake.modules.nixos.default =
{ config, ... }:
{
#TODO: move sudo/security options elsewhere
# security.sudo.wheelNeedsPassword = false;
# nix.settings.trusted-users = [ "@wheel" ];
# persist uids and gids
persistDirs = [ "/var/lib/nixos" ];
users = {
mutableUsers = false;
groups.users.gid = 100;
users = forAllUsers' (
name: value: {
name: _: {
isNormalUser = true;
hashedPasswordFile = config.sops.secrets."${name}/hashedPassword".path;
extraGroups = optional (value.primary or false) "wheel";
}
);
};