modules/profiles/security/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

{ lib, ... }:
{
  security = {
    polkit.enable = true;

    sudo.enable = lib.mkDefault false;
    doas = {
      enable = lib.mkDefault true;
      extraRules = [{
        groups = [ "wheel" ];
        keepEnv = true;
        persist = true;
      }];
    };
  };
}