added sudo and step-client modules

2026-03-12 12:25:58 -05:00
parent 1825230029
commit 9a22aba03a
4 changed files with 46 additions and 1 deletions
--- a/modules/programs/sudo.nix
+++ b/modules/programs/sudo.nix
@@ -0,0 +1,29 @@
+{ inputs, ... }: {
+  flake.modules.nixos.sudo = { pkgs, lib, ... }: {
+    security.sudo = {
+      enable = true;
+      extraRules = [{
+        commands = [
+          {
+            command = "${pkgs.systemd}/bin/systemctl suspend";
+            options = [ "NOPASSWD" ];
+          }
+          {
+            command = "${pkgs.systemd}/bin/reboot";
+            options = [ "NOPASSWD" ];
+          }
+          {
+            command = "${pkgs.systemd}/bin/poweroff";
+            options = [ "NOPASSWD" ];
+          }
+        ];
+        groups = [ "wheel" ];
+      }];
+      extraConfig = with pkgs; ''
+        Defaults:picloud secure_path="${lib.makeBinPath [
+          systemd
+        ]}:/nix/var/nix/profiles/default/bin:/run/current-system/sw/bin"
+      '';
+    };
+  };
+}