From 4d65b9fd1dd861ba0cc9070245cf5e0b8531a9d6 Mon Sep 17 00:00:00 2001
From: h7x4 <h7x4@nani.wtf>
Date: Sun, 1 Sep 2024 03:17:15 +0200
Subject: [PATCH] common/sudo: misc config

---
 base/default.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/base/default.nix b/base/default.nix
index 10126636..2fb413fb 100644
--- a/base/default.nix
+++ b/base/default.nix
@@ -45,6 +45,11 @@
 
   programs.zsh.enable = true;
 
+  security.sudo.execWheelOnly = true;
+  security.sudo.extraConfig = ''
+    Defaults lecture = never
+  '';
+
   users.groups."drift".name = "drift";
 
   # Trusted users on the nix builder machines