aboutsummaryrefslogtreecommitdiff
path: root/modules/doas.nix
diff options
context:
space:
mode:
Diffstat (limited to 'modules/doas.nix')
-rw-r--r--modules/doas.nix13
1 files changed, 12 insertions, 1 deletions
diff --git a/modules/doas.nix b/modules/doas.nix
index d68bf6b..16a6dc6 100644
--- a/modules/doas.nix
+++ b/modules/doas.nix
@@ -2,11 +2,22 @@
config,
lib,
options,
+ pkgs,
...
}:
{
security = {
- doas.extraRules = [ { groups = [ "wheel" ]; } ];
+ doas.extraRules = [
+ {
+ groups = [ "wheel" ];
+ }
+ {
+ cmd = "mount";
+ groups = [ "wheel" ];
+ noPass = true;
+ }
+ ];
+
sudo.enable = lib.mkDefault (!config.security.doas.enable);
};
}