modules/doas.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

{
  config,
  lib,
  options,
  pkgs,
  ...
}:
{
  security = {
    doas.extraRules = [
	    {
		    groups = [ "wheel" ];
	    }
	    {
		    cmd = "mount";
		    groups = [ "wheel" ];
		    noPass = true;
	    }
    ];

    sudo.enable = lib.mkDefault (!config.security.doas.enable);
  };
}