hd/cfg
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

sudo -> doas

Browse source
This commit is contained in:
Henri Dohmen 2025-07-02 22:40:07 +02:00
parent f1a1dd5d53
commit b497b6405d
5 changed files with 38 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

28
mod/desktop/security.nix Normal file
View file

@ -0,0 +1,28 @@
{
config,
lib,
pkgs,
...
}:
let
cfg = config.desktop.security;
inherit (lib) mkEnableOption mkIf;
in
{
options.desktop.security.enable = mkEnableOption "Security";
config = mkIf cfg.enable {
security.protectKernelImage = true;
security.sudo.enable = false;
security.doas = {
enable = true;
extraRules = [
{
groups = [ "wheel" ];
persist = true;
keepEnv = true;
}
];
};
};
}