mynix/system
1
1
Fork 0
Code Issues 1 Pull requests Activity

Revert "modules: improve settings to configure nopasswd commands"

Browse source 
This reverts commit a501f2ea16.
This commit is contained in:
Dmitriy Pleshevskiy 2024-09-29 17:07:33 +03:00
parent 29c1290f08
commit 34ba9c0f55
Signed by: pleshevskiy
GPG key ID: 17041163DA10A9A2
5 changed files with 10 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
modules/machine.nix
View file

@ -36,4 +36,14 @@
local.programs.pass.enable = lib.mkDefault true; local.programs.pass.enable = lib.mkDefault true;
local.programs.browsers.librewolf.enable = lib.mkDefault true; local.programs.browsers.librewolf.enable = lib.mkDefault true;
security.sudo.extraRules = [{
commands = [
{
command = "/run/current-system/sw/bin/nixos-container";
options = [ "NOPASSWD" ];
}
];
groups = [ "wheel" ];
}];
} }

1
modules/nixos/configs/default.nix
View file

@ -5,7 +5,6 @@
./fonts.nix ./fonts.nix
./keyboard.nix ./keyboard.nix
./nix.nix ./nix.nix
./security.nix
./sound.nix ./sound.nix
./system.nix ./system.nix
./yubikey.nix ./yubikey.nix

2
modules/nixos/programs/browsers/default.nix
View file

@ -39,8 +39,6 @@ in
config = lib.mkIf isEnable { config = lib.mkIf isEnable {
environment.systemPackages = hostPackages; environment.systemPackages = hostPackages;
local.security.sudo.nopasswd = [{ commands = hostPackages; }];
local.sound.systemWide = true; local.sound.systemWide = true;
containers.browsers = { containers.browsers = {

2
modules/nixos/programs/communication/skype.nix
View file

@ -27,8 +27,6 @@ in
config = lib.mkIf cfg.enable { config = lib.mkIf cfg.enable {
environment.systemPackages = [ hostSkype ]; environment.systemPackages = [ hostSkype ];
local.security.sudo.nopasswd = [{ commands = [ hostSkype ]; }];
local.sound.systemWide = true; local.sound.systemWide = true;
containers.skype = { containers.skype = {

2
modules/nixos/programs/communication/telegram.nix
View file

@ -27,8 +27,6 @@ in
config = lib.mkIf cfg.enable { config = lib.mkIf cfg.enable {
environment.systemPackages = [ hostTelegram ]; environment.systemPackages = [ hostTelegram ];
local.security.sudo.nopasswd = [{ commands = [ hostTelegram ]; }];
local.sound.systemWide = true; local.sound.systemWide = true;
containers.telegram = { containers.telegram = {