common/sudo: misc config

2024-09-01 03:17:15 +02:00 · 2024-09-01 03:17:15 +02:00 · 4d65b9fd1d
parent f3e094520e
commit 4d65b9fd1d
1 changed files with 5 additions and 0 deletions
--- a/base/default.nix
+++ b/base/default.nix
@ -45,6 +45,11 @@

  programs.zsh.enable = true;

+  security.sudo.execWheelOnly = true;
+  security.sudo.extraConfig = ''
+    Defaults lecture = never
+  '';
+
  users.groups."drift".name = "drift";

  # Trusted users on the nix builder machines